In Modem, there is a possible system crash due to improper input validation.

CISA ADP · SSVC 2.0.3

Exploitation

None

Automatable

Yes

Technical impact

Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

• MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863 VendorMediaTek Affected Modem LR12A, LR13, NR15, NR16, NR17.R1, NR17.R2 Fixed in — No fix listed CNA

No fixed version listed by the sources yet.

1. 2026-10-02 Threatist record created from CVE-2024-20149
2. 2026-10-03 Alias added: GHSA-7fhf-99f5-2645

• TI-2022-06117 Out-of-bounds write in MediaTek MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739… CVSS 3.1CRITICAL 9.8
• TI-2022-04665 Out-of-bounds write in MediaTek MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739… CVSS 3.1CRITICAL 9.8
• TI-2021-17332 In Modem EMM, there is a possible information disclosure due to a missing data encryption. CVSS 3.1HIGH 7.5

• CVE-2024-20149 · CVE Program
• CVE-2024-20149 · NVD
• FIRST EPSS
• GHSA-7fhf-99f5-2645 · GitHub Advisory Database · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences