CVSS: 6.5EPSS: 0%CPEs: 16EXPL: 0CVE-2024-20069
https://notcve.org/view.php?id=CVE-2024-20069
03 Jun 2024 — In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01286330; Issue ID: MSV-1430. En el módem, existe una posible selección de algoritmos menos seguros durante el IKE de VoWiFi debido a que falta una verificación de degradación de DH. • https://corp.mediatek.com/product-security-bulletin/June-2024 • CWE-757: Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') •
CVSS: 7.8EPSS: 0%CPEs: 29EXPL: 0CVE-2024-20064
https://notcve.org/view.php?id=CVE-2024-20064
06 May 2024 — In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08572601; Issue ID: MSV-1229. En el servicio WLAN, existe una posible escritura fuera de los límites debido a una validación de entrada incorrecta. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-20: Improper Input Validation •
CVSS: 5.9EPSS: 0%CPEs: 24EXPL: 0CVE-2024-20060
https://notcve.org/view.php?id=CVE-2024-20060
06 May 2024 — In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541754. En este caso, existe una posible escalada de privilegios debido a una verificación de estado incorrecta. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-1332: Improper Handling of Faults that Lead to Instruction Skips •
CVSS: 6.7EPSS: 0%CPEs: 24EXPL: 0CVE-2024-20059
https://notcve.org/view.php?id=CVE-2024-20059
06 May 2024 — In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541749. En este caso, existe una posible escalada de privilegios debido a una verificación de estado incorrecta. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-1332: Improper Handling of Faults that Lead to Instruction Skips •
CVSS: 7.8EPSS: 0%CPEs: 59EXPL: 0CVE-2023-32871
https://notcve.org/view.php?id=CVE-2023-32871
06 May 2024 — In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514. En DA, existe una posible omisión de permiso debido a una verificación de estado incorrecta. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-391: Unchecked Error Condition •
CVSS: 7.2EPSS: 0%CPEs: 37EXPL: 0CVE-2024-20057
https://notcve.org/view.php?id=CVE-2024-20057
06 May 2024 — In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08587881; Issue ID: ALPS08587881. En keyInstall, existe una posible escritura fuera de los límites debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 47EXPL: 0CVE-2024-20040
https://notcve.org/view.php?id=CVE-2024-20040
01 Apr 2024 — In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979. En el firmware WLAN, existe una posible escritura fuera de los límites debido a una validación de entrada incorrecta. • https://corp.mediatek.com/product-security-bulletin/April-2024 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 31EXPL: 0CVE-2024-20037
https://notcve.org/view.php?id=CVE-2024-20037
04 Mar 2024 — In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495937; Issue ID: ALPS08495937. • https://corp.mediatek.com/product-security-bulletin/March-2024 • CWE-754: Improper Check for Unusual or Exceptional Conditions •
CVSS: 6.7EPSS: 0%CPEs: 35EXPL: 0CVE-2024-20032
https://notcve.org/view.php?id=CVE-2024-20032
04 Mar 2024 — In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08487630; Issue ID: MSV-1020. • https://corp.mediatek.com/product-security-bulletin/March-2024 • CWE-862: Missing Authorization •
CVSS: 8.2EPSS: 0%CPEs: 37EXPL: 0CVE-2024-20005
https://notcve.org/view.php?id=CVE-2024-20005
04 Mar 2024 — In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599. • https://corp.mediatek.com/product-security-bulletin/March-2024 • CWE-276: Incorrect Default Permissions •