What is CVE-2024-20149?

CVE-2024-20149 is a high-severity vulnerability in Mediatek Lr12, classified under Improper Validation of Specified Quantity in Input. CVSS score: 7.5/10. Published 2025-01-06.

How severe is CVE-2024-20149?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Mediatek Lr12

CVE-2024-20149

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY0123134…

EPSS: 0.007 (48.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Mediatek Lr12
Mediatek Lr13
Mediatek Mt2735
Mediatek Mt2737
Mediatek Mt6767
Mediatek Mt6768
Mediatek Mt6769
Mediatek Mt6769k
Mediatek Mt6769s
Mediatek Mt6769t

Weakness classification (CWE)

CWE-1284 — Improper Validation of Specified Quantity in Input

References

security@mediatek.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-20149?: CVE-2024-20149 is a high-severity vulnerability in Mediatek Lr12, classified under Improper Validation of Specified Quantity in Input. CVSS score: 7.5/10. Published 2025-01-06.
How severe is CVE-2024-20149?: High severity. CVSS v3 base score is 7.5 out of 10.