Page 31 of 355 results (0.007 seconds)

CVSS: 6.7EPSS: 0%CPEs: 56EXPL: 0

CVE-2023-20664

https://notcve.org/view.php?id=CVE-2023-20664

In gz, there is a possible double free due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505952; Issue ID: ALPS07505952. • https://corp.mediatek.com/product-security-bulletin/April-2023 • CWE-416: Use After Free •

CVSS: 4.4EPSS: 0%CPEs: 43EXPL: 0

CVE-2023-20665

https://notcve.org/view.php?id=CVE-2023-20665

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628604. • https://corp.mediatek.com/product-security-bulletin/April-2023 • CWE-125: Out-of-bounds Read •

CVSS: 4.4EPSS: 0%CPEs: 45EXPL: 0

CVE-2023-20646

https://notcve.org/view.php?id=CVE-2023-20646

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628536; Issue ID: ALPS07628536. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-20: Improper Input Validation •

CVSS: 4.4EPSS: 0%CPEs: 34EXPL: 0

CVE-2023-20647

https://notcve.org/view.php?id=CVE-2023-20647

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628547; Issue ID: ALPS07628547. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-20: Improper Input Validation •

CVSS: 6.4EPSS: 0%CPEs: 27EXPL: 0

CVE-2023-20625

https://notcve.org/view.php?id=CVE-2023-20625

In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628532; Issue ID: ALPS07628532. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-662: Improper Synchronization •