CVSS: 10.0EPSS: 0%CPEs: 73EXPL: 0CVE-2022-20083
https://notcve.org/view.php?id=CVE-2022-20083
06 Jul 2022 — In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00803883; Issue ID: MOLY00803883. En Modem 2G/3G CC, es posible sea producida una escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/July-2022 • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 73EXPL: 0CVE-2022-21744
https://notcve.org/view.php?id=CVE-2022-21744
06 Jul 2022 — In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00810064; Issue ID: ALPS06641626. En Modem 2G RR, es posible sea producida una escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/July-2022 • CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 47EXPL: 0CVE-2022-21764
https://notcve.org/view.php?id=CVE-2022-21764
06 Jul 2022 — In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044717; Issue ID: ALPS07044717. En telecom service, Se presenta una posible divulgación de información debido a una falta de comprobación de permisos. • https://corp.mediatek.com/product-security-bulletin/July-2022 • CWE-862: Missing Authorization •
CVSS: 5.5EPSS: 0%CPEs: 47EXPL: 0CVE-2022-21763
https://notcve.org/view.php?id=CVE-2022-21763
06 Jul 2022 — In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044717; Issue ID: ALPS07044708. En telecom service, Se presenta una posible divulgación de información debido a una falta de comprobación de permisos. • https://corp.mediatek.com/product-security-bulletin/July-2022 • CWE-862: Missing Authorization •
CVSS: 7.0EPSS: 0%CPEs: 21EXPL: 0CVE-2022-20082
https://notcve.org/view.php?id=CVE-2022-20082
06 Jul 2022 — In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; Issue ID: ALPS07044730. En GPU, Se presenta un posible uso de memoria previamente liberada debido a una condición de carrera. • https://corp.mediatek.com/product-security-bulletin/July-2022 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 4.9EPSS: 0%CPEs: 13EXPL: 0CVE-2022-21762
https://notcve.org/view.php?id=CVE-2022-21762
06 Jun 2022 — In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06477946; Issue ID: ALPS06477946. En apusys driver, se presenta un posible bloqueo del sistema debido a un desbordamiento de enteros. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-190: Integer Overflow or Wraparound •
CVSS: 4.9EPSS: 0%CPEs: 46EXPL: 0CVE-2022-21761
https://notcve.org/view.php?id=CVE-2022-21761
06 Jun 2022 — In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479532; Issue ID: ALPS06479532. En apusys driver, se presenta un posible bloqueo del sistema debido a un desbordamiento de enteros. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-190: Integer Overflow or Wraparound •
CVSS: 4.9EPSS: 0%CPEs: 14EXPL: 0CVE-2022-21760
https://notcve.org/view.php?id=CVE-2022-21760
06 Jun 2022 — In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479562; Issue ID: ALPS06479562. En apusys driver, se presenta un posible bloqueo del sistema debido a un desbordamiento de enteros. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-190: Integer Overflow or Wraparound •
CVSS: 6.7EPSS: 0%CPEs: 43EXPL: 0CVE-2022-21759
https://notcve.org/view.php?id=CVE-2022-21759
06 Jun 2022 — In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077. En power service, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-787: Out-of-bounds Write •
CVSS: 6.7EPSS: 0%CPEs: 56EXPL: 0CVE-2022-21758
https://notcve.org/view.php?id=CVE-2022-21758
06 Jun 2022 — In ccu, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06439600; Issue ID: ALPS06439600. En ccu, se presenta una posible corrupción de memoria debido a una doble liberación. • https://corp.mediatek.com/product-security-bulletin/June-2022 • CWE-415: Double Free •