2025-01-05 Android security bulletin - MediaTek components

Created on 2025-01-07 07:09, updated on 2025-01-07 07:09, by Cédric Bonhomme
JSON
Description

Vulnerabilities affecting MediaTek components and further details are available directly from MediaTek. The severity assessment of these issues is provided directly by MediaTek.

CVE References Severity Subcomponent
CVE-2024-20154 A-376809176 Critical Modem
CVE-2024-20146 A-376814209 High wlan
CVE-2024-20148 A-376814212 High wlan
CVE-2024-20105 A-376821905 High m4u
CVE-2024-20140 A-376816308 High power
CVE-2024-20143 A-376814208 High DA
CVE-2024-20144 A-376816309 High DA
CVE-2024-20145 A-376816311 High DA

The user must update the device as soon as possible.

Vulnerabilities included in this bundle
Meta
[
  {
    "ref": [
      "https://source.android.com/docs/security/bulletin/2025-01-01#type",
      "https://vulnerability.circl.lu/bundle/a5165ebe-ef02-4a51-b2a6-2950b3c37690"
    ]
  }
]
Combined detection rules

Detection rules are retrieved from Rulezet.

Combined sightings
Author Vulnerability Source Type Date