
CVE-2022-26468
https://notcve.org/view.php?id=CVE-2022-26468
06 Sep 2022 — In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07168125; Issue ID: ALPS07168125. En preloader (usb), se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/September-2022 • CWE-787: Out-of-bounds Write •

CVE-2022-26469
https://notcve.org/view.php?id=CVE-2022-26469
06 Sep 2022 — In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07216598; Issue ID: ALPS07216598. En MtkEmail, se presenta una posible escalada de privilegios debido a la inyección de fragmentos. • https://corp.mediatek.com/product-security-bulletin/September-2022 • CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') •

CVE-2022-26467
https://notcve.org/view.php?id=CVE-2022-26467
06 Sep 2022 — In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07167738; Issue ID: ALPS07167738. En rpmb, se presenta una posible escritura fuera de límites debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/September-2022 • CWE-787: Out-of-bounds Write •

CVE-2022-26435
https://notcve.org/view.php?id=CVE-2022-26435
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435. En mailbox, se presenta una posible escritura fuera de límites debido a una confusión de tipo. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVE-2022-26434
https://notcve.org/view.php?id=CVE-2022-26434
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138450; Issue ID: ALPS07138450. En mailbox, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write •

CVE-2022-26433
https://notcve.org/view.php?id=CVE-2022-26433
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138400; Issue ID: ALPS07138400. En mailbox, se presenta una posible escritura fuera de límites debido a una confusión de tipo. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVE-2022-26432
https://notcve.org/view.php?id=CVE-2022-26432
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032542; Issue ID: ALPS07032542. En mailbox, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write •

CVE-2022-26431
https://notcve.org/view.php?id=CVE-2022-26431
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032553; Issue ID: ALPS07032553. En mailbox, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write •

CVE-2022-26430
https://notcve.org/view.php?id=CVE-2022-26430
01 Aug 2022 — In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521. En mailbox, se presenta una posible escritura fuera de límites debido a una confusión de tipo. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVE-2022-26426
https://notcve.org/view.php?id=CVE-2022-26426
01 Aug 2022 — In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085486; Issue ID: ALPS07085486. En camera isp, se presenta una posible escritura fuera de límites debido a una comprobación de límites que falta. • https://corp.mediatek.com/product-security-bulletin/August-2022 • CWE-787: Out-of-bounds Write •