Page 7 of 85 results (0.008 seconds)

CVSS: 5.5EPSS: 0%CPEs: 58EXPL: 0

CVE-2022-20037

https://notcve.org/view.php?id=CVE-2022-20037

09 Feb 2022 — In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171705; Issue ID: ALPS06171705. En ion driver, se presenta una posible divulgación de información debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 57EXPL: 0

CVE-2022-20036

https://notcve.org/view.php?id=CVE-2022-20036

09 Feb 2022 — In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171689; Issue ID: ALPS06171689. En ion driver, se presenta una posible divulgación de información debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 56EXPL: 0

CVE-2022-20031

https://notcve.org/view.php?id=CVE-2022-20031

09 Feb 2022 — In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05850708; Issue ID: ALPS05850708. En fb driver, se presenta una posible corrupción de memoria debido a un uso de memoria previamente liberada. • https://corp.mediatek.com/product-security-bulletin/February-2022 • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 59EXPL: 0

CVE-2022-20023

https://notcve.org/view.php?id=CVE-2022-20023

04 Jan 2022 — In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198608; Issue ID: ALPS06198608. En Bluetooth, se presenta un posible bloqueo de la aplicación debido a que bluetooth inunda un dispositivo con el paquete LMP_AU_rand. • https://corp.mediatek.com/product-security-bulletin/January-2022 • CWE-772: Missing Release of Resource after Effective Lifetime •

CVSS: 6.5EPSS: 0%CPEs: 30EXPL: 0

CVE-2022-20022

https://notcve.org/view.php?id=CVE-2022-20022

04 Jan 2022 — In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from a host with the same BD address as the currently connected BT host. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198578; Issue ID: ALPS06198578. En Bluetooth, se presenta una posible desconexión del enlace debido a que bluetooth no maneja apropiadamente un intento d... • https://corp.mediatek.com/product-security-bulletin/January-2022 •

CVSS: 6.5EPSS: 0%CPEs: 31EXPL: 0

CVE-2022-20021

https://notcve.org/view.php?id=CVE-2022-20021

04 Jan 2022 — In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198513; Issue ID: ALPS06198513. En Bluetooth, se presenta un posible bloqueo de la aplicación debido a que bluetooth no maneja apropiadamente la recepción de múltiples LMP_host_connection_req. • https://corp.mediatek.com/product-security-bulletin/January-2022 •

CVSS: 5.5EPSS: 0%CPEs: 41EXPL: 0

CVE-2022-20019

https://notcve.org/view.php?id=CVE-2022-20019

04 Jan 2022 — In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917620; Issue ID: ALPS05917620. En libMtkOmxGsmDec, se presenta una posible divulgación de información debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/January-2022 • CWE-20: Improper Input Validation •

CVSS: 4.4EPSS: 0%CPEs: 35EXPL: 0

CVE-2022-20018

https://notcve.org/view.php?id=CVE-2022-20018

04 Jan 2022 — In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863018; Issue ID: ALPS05863018. En el controlador seninf, se presenta una posible divulgación de información debido a datos no inicializados. • https://corp.mediatek.com/product-security-bulletin/January-2022 • CWE-908: Use of Uninitialized Resource •

CVSS: 4.4EPSS: 0%CPEs: 26EXPL: 0

CVE-2022-20015

https://notcve.org/view.php?id=CVE-2022-20015

04 Jan 2022 — In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966. En el controlador kd_camera_hw, se presenta una posible divulgación de información debido a datos no inicializados. • https://corp.mediatek.com/product-security-bulletin/January-2022 • CWE-908: Use of Uninitialized Resource •

CVSS: 5.5EPSS: 0%CPEs: 60EXPL: 0

CVE-2021-0674

https://notcve.org/view.php?id=CVE-2021-0674

17 Dec 2021 — In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237. En el descodificador alac, se presenta una posible lectura fuera de límites debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/December-2021 • CWE-125: Out-of-bounds Read •