CVSS: 5.9EPSS: 0%CPEs: 29EXPL: 0CVE-2022-20081
https://notcve.org/view.php?id=CVE-2022-20081
In A-GPS, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06461919; Issue ID: ALPS06461919. En A-GPS, se presenta un posible ataque de tipo man in the middle debido a que no han sido comprobados apropiadamente los certificados. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-295: Improper Certificate Validation •
CVSS: 7.8EPSS: 0%CPEs: 34EXPL: 0CVE-2022-20054
https://notcve.org/view.php?id=CVE-2022-20054
In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219083; Issue ID: ALPS06219083. En ims service, se presenta una posible inyección de comandos AT debido a una falta de comprobación de permisos. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-862: Missing Authorization •
CVSS: 6.8EPSS: 0%CPEs: 22EXPL: 0CVE-2022-20034
https://notcve.org/view.php?id=CVE-2022-20034
In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160806. En Preloader XFLASH, se presenta una posible escalada de privilegios debido a una comprobación inapropiada del certificado. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-295: Improper Certificate Validation •
CVSS: 7.8EPSS: 0%CPEs: 56EXPL: 0CVE-2022-20031
https://notcve.org/view.php?id=CVE-2022-20031
In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05850708; Issue ID: ALPS05850708. En fb driver, se presenta una posible corrupción de memoria debido a un uso de memoria previamente liberada. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 29EXPL: 0CVE-2022-20024
https://notcve.org/view.php?id=CVE-2022-20024
In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219064; Issue ID: ALPS06219064. En system service, se presenta una posible omisión de permisos debido a una falta de comprobación de permisos. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-862: Missing Authorization •