CVSS: 6.7EPSS: 0%CPEs: 77EXPL: 0CVE-2022-20105
https://notcve.org/view.php?id=CVE-2022-20105
In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330460; Issue ID: DTV03330460. En MM service, se presenta una posible escritura fuera de límites debido a un desbordamiento del búfer en la región stack de la memoria. • https://corp.mediatek.com/product-security-bulletin/May-2022 • CWE-787: Out-of-bounds Write •
CVSS: 4.4EPSS: 0%CPEs: 16EXPL: 0CVE-2022-20096
https://notcve.org/view.php?id=CVE-2022-20096
In camera, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06419003; Issue ID: ALPS06419003. En camera, se presenta una posible divulgación de información debido a datos no inicializados. • https://corp.mediatek.com/product-security-bulletin/May-2022 • CWE-908: Use of Uninitialized Resource •
CVSS: 7.0EPSS: 0%CPEs: 56EXPL: 0CVE-2022-20110
https://notcve.org/view.php?id=CVE-2022-20110
In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399901. En ion, se presenta un posible uso de memoria previamente liberada debido a una condición de carrera. • https://corp.mediatek.com/product-security-bulletin/May-2022 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVSS: 7.8EPSS: 0%CPEs: 56EXPL: 0CVE-2022-20109
https://notcve.org/view.php?id=CVE-2022-20109
In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06399915; Issue ID: ALPS06399915. En ion, se presenta un posible uso de memoria previamente liberada debido a la actualización inapropiada del recuento de referencias. • https://corp.mediatek.com/product-security-bulletin/May-2022 •
CVSS: 6.9EPSS: 0%CPEs: 37EXPL: 0CVE-2022-20080
https://notcve.org/view.php?id=CVE-2022-20080
In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05881290; Issue ID: ALPS05881290. En SUB2AF, se presenta una posible corrupción de memoria debido a una condición de carrera. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •