CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2021-31577
https://notcve.org/view.php?id=CVE-2021-31577
In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241. • https://corp.mediatek.com/product-security-acknowledgements • CWE-862: Missing Authorization •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2021-31576
https://notcve.org/view.php?id=CVE-2021-31576
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241. • https://corp.mediatek.com/product-security-acknowledgements • CWE-862: Missing Authorization •
CVSS: 4.4EPSS: 0%CPEs: 35EXPL: 0CVE-2022-32595
https://notcve.org/view.php?id=CVE-2022-32595
In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236. • https://corp.mediatek.com/product-security-bulletin/December-2022 • CWE-125: Out-of-bounds Read •
CVSS: 4.4EPSS: 0%CPEs: 5EXPL: 0CVE-2023-20606
https://notcve.org/view.php?id=CVE-2023-20606
In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07571104; Issue ID: ALPS07571104. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-20: Improper Input Validation •
CVSS: 6.7EPSS: 0%CPEs: 39EXPL: 0CVE-2023-20615
https://notcve.org/view.php?id=CVE-2023-20615
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-787: Out-of-bounds Write •