CVSS: 6.7EPSS: 0%CPEs: 43EXPL: 0CVE-2023-20628
https://notcve.org/view.php?id=CVE-2023-20628
In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494460; Issue ID: ALPS07494460. • https://corp.mediatek.com/product-security-bulletin/March-2023 •
CVSS: 6.7EPSS: 0%CPEs: 27EXPL: 0CVE-2023-20630
https://notcve.org/view.php?id=CVE-2023-20630
In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628505; Issue ID: ALPS07628505. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-787: Out-of-bounds Write •
CVSS: 6.4EPSS: 0%CPEs: 25EXPL: 0CVE-2023-20610
https://notcve.org/view.php?id=CVE-2023-20610
In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363469; Issue ID: ALPS07363469. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-662: Improper Synchronization •
CVSS: 6.4EPSS: 0%CPEs: 25EXPL: 0CVE-2023-20608
https://notcve.org/view.php?id=CVE-2023-20608
In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363599; Issue ID: ALPS07363599. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-416: Use After Free •
CVSS: 6.7EPSS: 0%CPEs: 46EXPL: 0CVE-2023-20616
https://notcve.org/view.php?id=CVE-2023-20616
In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07560720. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •