CVSS: 7.8EPSS: 0%CPEs: 29EXPL: 0CVE-2022-20024
https://notcve.org/view.php?id=CVE-2022-20024
In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219064; Issue ID: ALPS06219064. En system service, se presenta una posible omisión de permisos debido a una falta de comprobación de permisos. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-862: Missing Authorization •
CVSS: 6.5EPSS: 0%CPEs: 59EXPL: 0CVE-2022-20023
https://notcve.org/view.php?id=CVE-2022-20023
In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198608; Issue ID: ALPS06198608. En Bluetooth, se presenta un posible bloqueo de la aplicación debido a que bluetooth inunda un dispositivo con el paquete LMP_AU_rand. • https://corp.mediatek.com/product-security-bulletin/January-2022 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 5.5EPSS: 0%CPEs: 28EXPL: 0CVE-2022-20020
https://notcve.org/view.php?id=CVE-2022-20020
In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05943906; Issue ID: ALPS05943906. En libvcodecdrv, se presenta una posible divulgación de información debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/January-2022 • CWE-20: Improper Input Validation •
CVSS: 6.7EPSS: 0%CPEs: 18EXPL: 0CVE-2022-20016
https://notcve.org/view.php?id=CVE-2022-20016
In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862986; Issue ID: ALPS05862986. En el controlador vow, se presenta una posible corrupción de memoria debido a un bloqueo inapropiado. • https://corp.mediatek.com/product-security-bulletin/January-2022 • CWE-667: Improper Locking •
CVSS: 6.7EPSS: 0%CPEs: 20EXPL: 0CVE-2022-20014
https://notcve.org/view.php?id=CVE-2022-20014
In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05857308; Issue ID: ALPS05857308. En el controlador vow, se presenta una posible corrupción de la memoria debido a una comprobación de entrada inapropiada. • https://corp.mediatek.com/product-security-bulletin/January-2022 • CWE-787: Out-of-bounds Write •