CVSS: 6.7EPSS: 0%CPEs: 56EXPL: 0CVE-2022-21758
https://notcve.org/view.php?id=CVE-2022-21758
In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06439600; Issue ID: ALPS06439600. En ccu, se presenta una posible corrupción de memoria debido a una doble liberación. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-415: Double Free •
CVSS: 4.4EPSS: 0%CPEs: 37EXPL: 0CVE-2022-21756
https://notcve.org/view.php?id=CVE-2022-21756
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535950; Issue ID: ALPS06535950. En WLAN driver, se presenta una posible lectura fuera de límites debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-125: Out-of-bounds Read •
CVSS: 4.4EPSS: 0%CPEs: 65EXPL: 0CVE-2022-21755
https://notcve.org/view.php?id=CVE-2022-21755
In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545464; Issue ID: ALPS06545464. En WLAN driver, se presenta una posible lectura fuera de límites debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 56EXPL: 0CVE-2022-21749
https://notcve.org/view.php?id=CVE-2022-21749
In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06511058; Issue ID: ALPS06511058. En telephony, se presenta una posible divulgación de información debido a una falta de comprobación de permisos. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-862: Missing Authorization •
CVSS: 6.6EPSS: 0%CPEs: 40EXPL: 0CVE-2022-20074
https://notcve.org/view.php?id=CVE-2022-20074
In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06183301; Issue ID: ALPS06183301. En preloader (partition), se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •