CVSS: 7.2EPSS: 0%CPEs: 39EXPL: 0CVE-2022-20064
https://notcve.org/view.php?id=CVE-2022-20064
In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617. En ccci, se presenta un posible filtrado de punteros del kernel debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-125: Out-of-bounds Read •
CVSS: 5.9EPSS: 0%CPEs: 29EXPL: 0CVE-2022-20081
https://notcve.org/view.php?id=CVE-2022-20081
In A-GPS, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06461919; Issue ID: ALPS06461919. En A-GPS, se presenta un posible ataque de tipo man in the middle debido a que no han sido comprobados apropiadamente los certificados. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-295: Improper Certificate Validation •
CVSS: 6.5EPSS: 0%CPEs: 24EXPL: 0CVE-2022-20057
https://notcve.org/view.php?id=CVE-2022-20057
In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; Issue ID: ALPS06271186. En btif, se presenta una posible corrupción de memoria debido a un manejo incorrecto de errores. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 5.5EPSS: 0%CPEs: 64EXPL: 0CVE-2022-20051
https://notcve.org/view.php?id=CVE-2022-20051
In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219127; Issue ID: ALPS06219127. En ims service, se presenta un posible comportamiento no esperado de la aplicación debido a una asignación de privilegios incorrecta. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-269: Improper Privilege Management •
CVSS: 6.7EPSS: 0%CPEs: 50EXPL: 0CVE-2022-20050
https://notcve.org/view.php?id=CVE-2022-20050
In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038. En connsyslogger, se presenta un posible seguimiento de enlaces simbólicos debido a una resolución inapropiada de enlaces. • https://corp.mediatek.com/product-security-bulletin/March-2022 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •