SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2024-20019

In wlan driver, there is a possible memory leak due to improper input handling.

MEDIUM 5.9EPSS 0.72%

Does this matter?

Lower severity and a low EPSS score (0.72%). Track it; it rarely justifies an emergency change on its own.

Description

In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00351241; Issue ID: MSV-1173.

CVSS 3.1
5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.72% probability · 52th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
mediatek/software package
Source
security@mediatek.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.