[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyCNkzqaKzoclFQBoNatyM9ffTSCe-zGC8SSJOnBgjms":3,"g5a-risk:CVE-2024-20138":162},{"success":4,"data":5,"meta":159},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":77,"references":78,"referencesCount":84,"weaknesses":85,"weaknessesCount":84,"isActivelyExploited":94,"cisaInfo":26,"otxData":26,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":157,"notableEvents":158},"CVE-2024-20138","What is CVE-2024-20138?","In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.","In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional e...","2024-12-02T04:15:06.133","2025-04-22T13:49:26.753",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.00286,[29,29,29,29,29,29,29],"High",[33,38,43,46,49,53,56,59,62,65,68,71,74],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"mediatek","software_development_kit","*","cpe:2.3:a:mediatek:software_development_kit:*:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"google","android","13.0","cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"14.0","cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"15.0","cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",{"vendor":34,"product":50,"version":51,"criteria":52,"vulnerable":4},"mt3605","-","cpe:2.3:h:mediatek:mt3605:-:*:*:*:*:*:*:*",{"vendor":34,"product":54,"version":51,"criteria":55,"vulnerable":4},"mt6985","cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",{"vendor":34,"product":57,"version":51,"criteria":58,"vulnerable":4},"mt6989","cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",{"vendor":34,"product":60,"version":51,"criteria":61,"vulnerable":4},"mt6990","cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",{"vendor":34,"product":63,"version":51,"criteria":64,"vulnerable":4},"mt7925","cpe:2.3:h:mediatek:mt7925:-:*:*:*:*:*:*:*",{"vendor":34,"product":66,"version":51,"criteria":67,"vulnerable":4},"mt7927","cpe:2.3:h:mediatek:mt7927:-:*:*:*:*:*:*:*",{"vendor":34,"product":69,"version":51,"criteria":70,"vulnerable":4},"mt8195","cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",{"vendor":34,"product":72,"version":51,"criteria":73,"vulnerable":4},"mt8370","cpe:2.3:h:mediatek:mt8370:-:*:*:*:*:*:*:*",{"vendor":34,"product":75,"version":51,"criteria":76,"vulnerable":4},"mt8390","cpe:2.3:h:mediatek:mt8390:-:*:*:*:*:*:*:*",13,[79],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fcorp.mediatek.com\u002Fproduct-security-bulletin\u002FDecember-2024","Mediatek",[83],"Vendor Advisory",1,[86],{"id":87,"name":88,"description":89,"extendedDescription":90,"status":91,"abstraction":92,"structure":93},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2024-20138? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-20138, a high severity cyber security vulnerability from 2024. In wlan driver, there is a possible out of bound read due t...","CVE-2024-20138, CVE-2024-20138 vulnerability, CVE-2024-20138 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, mediatek security, google security, software_development_kit vulnerability, android vulnerability, mt3605 vulnerability, mt6985 vulnerability, mt6989 vulnerability","\u002Fwhat-is\u002Fcve-2024-20138",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-20138","Cybersecurity","CVE-2024-20138, CVE-2024-20138 vulnerability, CVE-2024-20138 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":123,"Negate":26,"Nodes":124},"AND",[125,137],{"Operator":126,"Negate":26,"CPEMatch":127},"OR",[128,131,133,135],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":130},"717EE6D8-BCB9-4F8B-AC18-5B2CD6F847CC","3.3",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"879FFD0C-9B38-4CAA-B057-1086D794D469",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2700BCC5-634D-4EC6-AB67-5B678D5F951D",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8538774C-906D-4B03-A3E7-FA7A55E0DA9E",{"Operator":126,"Negate":26,"CPEMatch":138},[139,141,143,145,147,149,151,153,155],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2F897E19-008E-4DC8-B4CB-BF27044B9F5C",{"Vulnerable":26,"Criteria":55,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE",{"Vulnerable":26,"Criteria":58,"MatchCriteriaID":144,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AD7DE6B2-66D9-4A3E-B15F-D56505559255",{"Vulnerable":26,"Criteria":61,"MatchCriteriaID":146,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1A76806D-A4E3-466A-90CB-E9FFE478E7A0",{"Vulnerable":26,"Criteria":64,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"27CFC9DF-2F4C-469A-8A19-A260B1134CFE",{"Vulnerable":26,"Criteria":67,"MatchCriteriaID":150,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"05525018-AFE0-415C-A71C-A77922C7D637",{"Vulnerable":26,"Criteria":70,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"ED210E64-6CE7-42B1-849E-68C0E22521F6",{"Vulnerable":26,"Criteria":73,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DA2B6BB9-7544-41A7-BF3A-344AA4CC4B31",{"Vulnerable":26,"Criteria":76,"MatchCriteriaID":156,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B774B7D7-B7DD-43A0-833F-7E39DF82CA60",[],[],{"lastModified":11,"cacheTime":160,"version":161},1792443200957,"2.0",{"score":163,"band":164,"action":165,"scoredAt":166},47,"Medium","Plan remediation","2026-10-16T07:04:46.251494+00:00"]