---
cve: "CVE-2024-20019"
severity: "MEDIUM"
cvss: 5.9
epss: "72%"
vendor: "MediaTek, Inc."
kev: false
exploited: false
published: "2024-03-04 03:15:07"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-02T21:11:48+02:00"
---

# CVE-2024-20019

> 5.9 MEDIUM

## Beschreibung

In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00351241; Issue ID: MSV-1173.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Hoch | good |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Keine | good |
| A Verfügbarkeit | Keine | good |

## Referenzen

- <https://corp.mediatek.com/product-security-bulletin/March-2024>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2024-20019) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_