CVSS: 6.7EPSS: 0%CPEs: 50EXPL: 0CVE-2022-20067
https://notcve.org/view.php?id=CVE-2022-20067
In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836585; Issue ID: ALPS05836585. En mdp, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 32EXPL: 0CVE-2022-20065
https://notcve.org/view.php?id=CVE-2022-20065
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108658; Issue ID: ALPS06108658. En ccci, se presenta una posible lectura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-125: Out-of-bounds Read •
CVSS: 7.2EPSS: 0%CPEs: 39EXPL: 0CVE-2022-20064
https://notcve.org/view.php?id=CVE-2022-20064
In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617. En ccci, se presenta un posible filtrado de punteros del kernel debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-125: Out-of-bounds Read •
CVSS: 6.6EPSS: 0%CPEs: 36EXPL: 0CVE-2022-20060
https://notcve.org/view.php?id=CVE-2022-20060
In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06137462. En preloader (usb), se presenta una posible omisión de permisos debido a una falta de autenticación de imagen apropiada. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-306: Missing Authentication for Critical Function •
CVSS: 6.6EPSS: 0%CPEs: 37EXPL: 0CVE-2022-20059
https://notcve.org/view.php?id=CVE-2022-20059
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160781. En preloader (usb), se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-787: Out-of-bounds Write •