
CVE-2023-20613
https://notcve.org/view.php?id=CVE-2023-20613
06 Feb 2023 — In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628614; Issue ID: ALPS07628614. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-20: Improper Input Validation •

CVE-2023-20614
https://notcve.org/view.php?id=CVE-2023-20614
06 Feb 2023 — In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628615; Issue ID: ALPS07628615. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-787: Out-of-bounds Write •

CVE-2023-20615
https://notcve.org/view.php?id=CVE-2023-20615
06 Feb 2023 — In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-787: Out-of-bounds Write •

CVE-2023-20616
https://notcve.org/view.php?id=CVE-2023-20616
06 Feb 2023 — In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07560720. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVE-2022-32595
https://notcve.org/view.php?id=CVE-2022-32595
06 Feb 2023 — In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236. • https://corp.mediatek.com/product-security-bulletin/December-2022 • CWE-125: Out-of-bounds Read •

CVE-2023-20612
https://notcve.org/view.php?id=CVE-2023-20612
06 Feb 2023 — In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629571; Issue ID: ALPS07629571. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-20: Improper Input Validation •

CVE-2022-32636
https://notcve.org/view.php?id=CVE-2022-32636
03 Jan 2023 — In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07510064. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-787: Out-of-bounds Write •

CVE-2022-32638
https://notcve.org/view.php?id=CVE-2022-32638
03 Jan 2023 — In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494449; Issue ID: ALPS07494449. En isp, existe una posible escritura fuera de los límites debido a una condición de ejecución. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •

CVE-2022-32646
https://notcve.org/view.php?id=CVE-2022-32646
03 Jan 2023 — In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363501; Issue ID: ALPS07363501. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-787: Out-of-bounds Write •

CVE-2022-32635
https://notcve.org/view.php?id=CVE-2022-32635
03 Jan 2023 — In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573237. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-787: Out-of-bounds Write •