CVE-2024-20137: MediaTek MT6890

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00384543; Issue ID: MSV-1727.

Affected products

• MediaTek MT6890: any version
• MediaTek MT7622: any version
• MediaTek MT7915: any version
• MediaTek MT7916: any version
• MediaTek MT7981: any version
• MediaTek MT7986: any version
• Mediatek, Inc MT6890, MT7622, MT7915, MT7916, MT7981, MT7986: up to and including 7.6.7.2

Published 2024-12-02. Last modified 2026-06-17.