CVE-2024-20039

published 2024-04-01

CVE-2024-20039: In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution…

Priority P2 58 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
google	android	—	—

Detection & IOCs extracted from sources · hover to see the quote

• · Patch ID MOLY01240012 (Issue MSV-1215) is the vendor reference for this modem protocol out-of-bounds write vulnerability; no public PoC, payload, or network indicators are disclosed in available sources. ↗
• · The vulnerability is in the MediaTek modem protocol component and is rated HIGH severity in the Android April 2024 Security Bulletin; exploitation requires no privileges or user interaction, making it a remote code execution risk purely at the modem layer. ↗
• · Android internal tracking reference is A-323462011 / M-MOLY01240012; no further technical detail, signatures, or IOCs are publicly available from these sources. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-787