CVSS: 6.7EPSS: 0%CPEs: 49EXPL: 0CVE-2022-20070
https://notcve.org/view.php?id=CVE-2022-20070
In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06362920; Issue ID: ALPS06362920. En ssmr, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-787: Out-of-bounds Write •
CVSS: 7.2EPSS: 0%CPEs: 39EXPL: 0CVE-2022-20064
https://notcve.org/view.php?id=CVE-2022-20064
In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617. En ccci, se presenta un posible filtrado de punteros del kernel debido a una comprobación de límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-125: Out-of-bounds Read •
CVSS: 7.2EPSS: 0%CPEs: 38EXPL: 0CVE-2022-20062
https://notcve.org/view.php?id=CVE-2022-20062
In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836418; Issue ID: ALPS05836418. En mdp, se presenta una posible corrupción de memoria debido a un uso de memoria previamente liberada. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-416: Use After Free •
CVSS: 5.9EPSS: 0%CPEs: 29EXPL: 0CVE-2022-20081
https://notcve.org/view.php?id=CVE-2022-20081
In A-GPS, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06461919; Issue ID: ALPS06461919. En A-GPS, se presenta un posible ataque de tipo man in the middle debido a que no han sido comprobados apropiadamente los certificados. • https://corp.mediatek.com/product-security-bulletin/April-2022 • CWE-295: Improper Certificate Validation •