Page 8 of 149 results (0.006 seconds)

CVSS: 6.4EPSS: 0%CPEs: 40EXPL: 0

CVE-2023-20611

https://notcve.org/view.php?id=CVE-2023-20611

06 Feb 2023 — In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588678; Issue ID: ALPS07588678. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-662: Improper Synchronization •

CVSS: 6.7EPSS: 0%CPEs: 46EXPL: 0

CVE-2023-20616

https://notcve.org/view.php?id=CVE-2023-20616

06 Feb 2023 — In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07560720. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVSS: 6.7EPSS: 0%CPEs: 54EXPL: 0

CVE-2022-32636

https://notcve.org/view.php?id=CVE-2022-32636

03 Jan 2023 — In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07510064. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 52EXPL: 0

CVE-2022-32635

https://notcve.org/view.php?id=CVE-2022-32635

03 Jan 2023 — In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573237. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-787: Out-of-bounds Write •

CVSS: 6.7EPSS: 0%CPEs: 58EXPL: 0

CVE-2022-32640

https://notcve.org/view.php?id=CVE-2022-32640

03 Jan 2023 — In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441652; Issue ID: ALPS07441652. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-787: Out-of-bounds Write •

CVSS: 6.7EPSS: 0%CPEs: 59EXPL: 0

CVE-2022-32641

https://notcve.org/view.php?id=CVE-2022-32641

03 Jan 2023 — In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453594; Issue ID: ALPS07453594. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-125: Out-of-bounds Read •

CVSS: 6.4EPSS: 0%CPEs: 15EXPL: 0

CVE-2022-32648

https://notcve.org/view.php?id=CVE-2022-32648

03 Jan 2023 — In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06535964; Issue ID: ALPS06535964. En disp, existe un posible use after free debido a una condición de ejecución. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-662: Improper Synchronization •

CVSS: 6.7EPSS: 0%CPEs: 55EXPL: 0

CVE-2022-32619

https://notcve.org/view.php?id=CVE-2022-32619

05 Dec 2022 — In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07439659; Issue ID: ALPS07439659. En keyinstall, existe una posible escritura fuera de los límites debido a una verificación de los límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/December-2022 • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 43EXPL: 0

CVE-2022-32601

https://notcve.org/view.php?id=CVE-2022-32601

08 Nov 2022 — In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319132; Issue ID: ALPS07319132. En telefonía, existe una posible omisión de permiso debido a una discrepancia en el formato del paquete. • https://corp.mediatek.com/product-security-bulletin/November-2022 • CWE-502: Deserialization of Untrusted Data •

CVSS: 7.8EPSS: 1%CPEs: 56EXPL: 0

CVE-2022-26446

https://notcve.org/view.php?id=CVE-2022-26446

08 Nov 2022 — In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 (CMAS message), with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883; Issue ID: ALPS07274118. En Modem 4G RRC, existe una posible falla del sistema debido a una validación de entrada incorrecta. • https://corp.mediatek.com/product-security-bulletin/November-2022 • CWE-617: Reachable Assertion •