CVSS: 6.9EPSS: 0%CPEs: 9EXPL: 0CVE-2022-20063
https://notcve.org/view.php?id=CVE-2022-20063
In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06171715; Issue ID: ALPS06171715. En atf (spm), se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-787: Out-of-bounds Write •
CVSS: 7.2EPSS: 0%CPEs: 38EXPL: 0CVE-2022-20062
https://notcve.org/view.php?id=CVE-2022-20062
In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836418; Issue ID: ALPS05836418. En mdp, se presenta una posible corrupción de memoria debido a un uso de memoria previamente liberada. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-416: Use After Free •
CVSS: 6.6EPSS: 0%CPEs: 36EXPL: 0CVE-2022-20060
https://notcve.org/view.php?id=CVE-2022-20060
In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06137462. En preloader (usb), se presenta una posible omisión de permisos debido a una falta de autenticación de imagen apropiada. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-306: Missing Authentication for Critical Function •
CVSS: 6.6EPSS: 0%CPEs: 37EXPL: 0CVE-2022-20059
https://notcve.org/view.php?id=CVE-2022-20059
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160781. En preloader (usb), se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-787: Out-of-bounds Write •
CVSS: 6.6EPSS: 0%CPEs: 35EXPL: 0CVE-2022-20058
https://notcve.org/view.php?id=CVE-2022-20058
In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160485. En preloader (usb), se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-787: Out-of-bounds Write •