In Bluetooth FW, there is a possible reachable assertion due...

0 CVSS

Vulnerability Description

In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389046 (Note: For MT79XX chipsets) / ALPS09136501 (Note: For MT2737, MT3603, MT6XXX, and MT8XXX chipsets); Issue ID: MSV-1797.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-20147

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://corp.mediatek.com/product-security-bulletin/February-2025

More from MediaTek, Inc.

View All →

CVE-2025-20807

In dpe, there is a possible out of bounds write...

Unknown 0

CVE-2025-20806

In dpe, there is a possible memory corruption due to...

Unknown 0

CVE-2025-20805

In dpe, there is a possible memory corruption due to...

Unknown 0

CVE-2025-20804

In dpe, there is a possible memory corruption due to...

Unknown 0

CVE-2025-20803

In dpe, there is a possible memory corruption due to...

Unknown 0

Affected Vendor

MediaTek, Inc.

View all reports →

Affected Software

MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6985, MT6989, MT6990, MT7902, MT7920, MT7921, MT7922, MT7925, MT7927, MT8195, MT8370, MT8390, MT8395, MT8518S, MT8532, MT8678

Vulnerable Versions:

Android 13.0, 14.0, 15.0 / SDK release 2.5, 3.5 and before / openWRT 23.05 / Yocto 3.3, 4.0, 5.0