CVSS: 9.8EPSS: 0%CPEs: 36EXPL: 0CVE-2024-20080
https://notcve.org/view.php?id=CVE-2024-20080
01 Jul 2024 — In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08720039; Issue ID: MSV-1424. En el servicio gnss existe una posible escalada de privilegios debido a una validación inadecuada del certificado. • https://corp.mediatek.com/product-security-bulletin/July-2024 • CWE-295: Improper Certificate Validation •
CVSS: 9.8EPSS: 0%CPEs: 32EXPL: 0CVE-2024-20079
https://notcve.org/view.php?id=CVE-2024-20079
01 Jul 2024 — In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08044040; Issue ID: MSV-1491. En el servicio gnss, existe una posible escritura fuera de los límites debido a una validación de entrada incorrecta. • https://corp.mediatek.com/product-security-bulletin/July-2024 • CWE-787: Out-of-bounds Write •
CVSS: 6.6EPSS: 0%CPEs: 30EXPL: 0CVE-2024-20074
https://notcve.org/view.php?id=CVE-2024-20074
03 Jun 2024 — In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08668110; Issue ID: MSV-1333. En dmc, existe una posible escritura fuera de los límites debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/June-2024 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 41EXPL: 0CVE-2024-20021
https://notcve.org/view.php?id=CVE-2024-20021
06 May 2024 — In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249. En atf spm, existe una forma posible de reasignar la memoria física a la memoria virtual debido a un error lógico. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-269: Improper Privilege Management •
CVSS: 4.4EPSS: 0%CPEs: 25EXPL: 0CVE-2024-20058
https://notcve.org/view.php?id=CVE-2024-20058
06 May 2024 — In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204. En keyInstall, existe una posible lectura fuera de los límites debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 59EXPL: 0CVE-2023-32871
https://notcve.org/view.php?id=CVE-2023-32871
06 May 2024 — In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514. En DA, existe una posible omisión de permiso debido a una verificación de estado incorrecta. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-391: Unchecked Error Condition •
CVSS: 7.2EPSS: 0%CPEs: 37EXPL: 0CVE-2024-20057
https://notcve.org/view.php?id=CVE-2024-20057
06 May 2024 — In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08587881; Issue ID: ALPS08587881. En keyInstall, existe una posible escritura fuera de los límites debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 26EXPL: 0CVE-2024-20056
https://notcve.org/view.php?id=CVE-2024-20056
06 May 2024 — In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528185; Issue ID: ALPS08528185. En el preloader, existe una posible escalada de privilegios debido a un valor predeterminado inseguro. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-20: Improper Input Validation •
CVSS: 6.6EPSS: 0%CPEs: 29EXPL: 0CVE-2024-20044
https://notcve.org/view.php?id=CVE-2024-20044
01 Apr 2024 — In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541784; Issue ID: ALPS08541784. En da, existe una posible escritura fuera de los límites debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/April-2024 • CWE-787: Out-of-bounds Write •
CVSS: 6.6EPSS: 0%CPEs: 29EXPL: 0CVE-2024-20043
https://notcve.org/view.php?id=CVE-2024-20043
01 Apr 2024 — In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541781; Issue ID: ALPS08541781. En da, existe una posible escritura fuera de los límites debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/April-2024 • CWE-787: Out-of-bounds Write •