2025-01-05 Android security bulletin - MediaTek components

Created on 2025-01-07 07:09 and updated on 2025-01-07 07:09.

Description

Vulnerabilities affecting MediaTek components and further details are available directly from MediaTek. The severity assessment of these issues is provided directly by MediaTek.

CVE References Severity Subcomponent
CVE-2024-20154 A-376809176 Critical Modem
CVE-2024-20146 A-376814209 High wlan
CVE-2024-20148 A-376814212 High wlan
CVE-2024-20105 A-376821905 High m4u
CVE-2024-20140 A-376816308 High power
CVE-2024-20143 A-376814208 High DA
CVE-2024-20144 A-376816309 High DA
CVE-2024-20145 A-376816311 High DA

The user must update the device as soon as possible.

Vulnerabilities included in this bundle

Meta

[
  {
    "ref": [
      "https://source.android.com/docs/security/bulletin/2025-01-01#type",
      "https://vulnerability.circl.lu/bundle/a5165ebe-ef02-4a51-b2a6-2950b3c37690"
    ]
  }
]

Author

Cédric Bonhomme

Combined sightings

Author Vulnerability Source Type Date