Saturday, December 7, 2024
HomeCVE/vulnerabilityMediaTek High Severity Vulnerabilities Let Attackers Escalate Privileges

MediaTek High Severity Vulnerabilities Let Attackers Escalate Privileges

Published on

SIEM as a Service

In its recent MediaTek Product Security Bulletin, the chipmaker disclosed two high-severity security vulnerabilities that affect multiple devices, including smartphones, tablets, AIoT (Artificial Intelligence of Things), smart displays, and more.

The vulnerabilities could allow attackers to escalate their privileges on affected devices, leading to unauthorized access and control. 

The vulnerabilities were identified and assessed using the Common Vulnerability Scoring System version 3.1 (CVSS v3.1), which assigns severity ratings based on their potential impact.

- Advertisement - SIEM as a Service

The two newly disclosed vulnerabilities, CVE-2024-20104 and CVE-2024-20106, have been classified as “High” in severity, posing a significant risk if left unpatched.

Protecting Your Networks & Endpoints With UnderDefense MDR – Request Free Demo

CVE-2024-20104: Out-of-Bounds Write in DA

The first vulnerability, CVE-2024-20104, is caused by an out-of-bounds write issue in the DA (Download Agent) component.

The problem arises from inadequate bounds checking, which could allow an attacker to write outside of the intended memory range.

This flaw could lead to a local privilege escalation, allowing attackers to gain higher access rights on the affected device. 

Notably, exploiting this vulnerability requires user interaction, but no additional execution privileges are necessary.

Devices utilizing the affected chipsets could be vulnerable if they run specific Android versions, OpenWRT, Yocto, or RDK-B software.

The vulnerability affects various MediaTek chipsets, including prominent models such as the MT6781, MT6879, and MT6983.

Affected Software Versions:

  • Android: 12.0, 13.0, 14.0, 15.0
  • OpenWRT: 19.07, 21.02, 23.05
  • Yocto: 4.0
  • RDK-B: 22Q3, 24Q1

CVE-2024-20106: Type Confusion in M4U

The second vulnerability, CVE-2024-20106, involves a confusion flaw in the M4U (Memory Management Unit) component.

Similar to CVE-2024-20104, this vulnerability can lead to an out-of-bounds write due to missing checks.

However, this flaw is more severe because it does not require user interaction and could allow attackers to gain system-level execution privileges.

This vulnerability affects many chipsets, including the MT6739, MT6765, and MT6885 models.

Affected Software Versions:

  • Android: 12.0, 13.0, 14.0, 15.0

MediaTek has been working closely with device manufacturers (OEMs) to ensure that security patches addressing these vulnerabilities have been delivered.

OEMs have had access to the updates for over two months, allowing ample time to integrate them into software updates for their devices. 

Users are strongly encouraged to install the latest firmware and security updates on their devices to mitigate any potential risks associated with these vulnerabilities.

Run private, Real-time Malware Analysis in both Windows & Linux VMs. Get a 14-day free trial with ANY.RUN!

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

DaMAgeCard Attack – New SD Card Attack Lets Hackers Directly Access System Memory

Security researchers have identified a significant vulnerability dubbed "DaMAgeCard Attack" in the new SD...

Deloitte Denies Breach, Claims Only Single System Affected

Ransomware group Brain Cipher claimed to have breached Deloitte UK and threatened to publish...

Top Five Industries Most Frequently Targeted by Phishing Attacks

Researchers analyzed phishing attacks from Q3 2023 to Q3 2024 and identified the top...

Russian BlueAlpha APT Exploits Cloudflare Tunnels to Distribute Custom Malware

BlueAlpha, a Russian state-sponsored group, is actively targeting Ukrainian individuals and organizations by using...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

DaMAgeCard Attack – New SD Card Attack Lets Hackers Directly Access System Memory

Security researchers have identified a significant vulnerability dubbed "DaMAgeCard Attack" in the new SD...

Deloitte Denies Breach, Claims Only Single System Affected

Ransomware group Brain Cipher claimed to have breached Deloitte UK and threatened to publish...

Top Five Industries Most Frequently Targeted by Phishing Attacks

Researchers analyzed phishing attacks from Q3 2023 to Q3 2024 and identified the top...