CVSS: 6.4EPSS: 0%CPEs: 25EXPL: 0CVE-2023-20608
https://notcve.org/view.php?id=CVE-2023-20608
06 Feb 2023 — In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363599; Issue ID: ALPS07363599. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-416: Use After Free •
CVSS: 6.4EPSS: 0%CPEs: 40EXPL: 0CVE-2023-20611
https://notcve.org/view.php?id=CVE-2023-20611
06 Feb 2023 — In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588678; Issue ID: ALPS07588678. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-662: Improper Synchronization •
CVSS: 6.7EPSS: 0%CPEs: 60EXPL: 0CVE-2022-32654
https://notcve.org/view.php?id=CVE-2022-32654
06 Feb 2023 — In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011. • https://corp.mediatek.com/product-security-bulletin/February-2023 •
CVSS: 6.7EPSS: 0%CPEs: 60EXPL: 0CVE-2022-32655
https://notcve.org/view.php?id=CVE-2022-32655
06 Feb 2023 — In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 6.7EPSS: 0%CPEs: 60EXPL: 0CVE-2022-32656
https://notcve.org/view.php?id=CVE-2022-32656
06 Feb 2023 — In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035. • https://corp.mediatek.com/product-security-bulletin/February-2023 •
CVSS: 7.8EPSS: 3%CPEs: 44EXPL: 0CVE-2022-32663
https://notcve.org/view.php?id=CVE-2022-32663
06 Feb 2023 — In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-476: NULL Pointer Dereference •
CVSS: 6.7EPSS: 0%CPEs: 46EXPL: 0CVE-2023-20616
https://notcve.org/view.php?id=CVE-2023-20616
06 Feb 2023 — In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07560720. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 6.4EPSS: 0%CPEs: 25EXPL: 0CVE-2023-20610
https://notcve.org/view.php?id=CVE-2023-20610
06 Feb 2023 — In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363469; Issue ID: ALPS07363469. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-662: Improper Synchronization •
CVSS: 7.8EPSS: 0%CPEs: 52EXPL: 0CVE-2022-32635
https://notcve.org/view.php?id=CVE-2022-32635
03 Jan 2023 — In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573237. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-787: Out-of-bounds Write •
CVSS: 6.4EPSS: 0%CPEs: 32EXPL: 0CVE-2022-32638
https://notcve.org/view.php?id=CVE-2022-32638
03 Jan 2023 — In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494449; Issue ID: ALPS07494449. En isp, existe una posible escritura fuera de los límites debido a una condición de ejecución. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •