
CVE-2023-20670
https://notcve.org/view.php?id=CVE-2023-20670
06 Apr 2023 — In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648710; Issue ID: ALPS07648710. • https://corp.mediatek.com/product-security-bulletin/April-2023 • CWE-787: Out-of-bounds Write •

CVE-2023-20655
https://notcve.org/view.php?id=CVE-2023-20655
06 Apr 2023 — In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203022; Issue ID: ALPS07203022. • https://corp.mediatek.com/product-security-bulletin/April-2023 • CWE-269: Improper Privilege Management •

CVE-2023-20630
https://notcve.org/view.php?id=CVE-2023-20630
07 Mar 2023 — In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628505; Issue ID: ALPS07628505. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-787: Out-of-bounds Write •

CVE-2023-20632
https://notcve.org/view.php?id=CVE-2023-20632
07 Mar 2023 — In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628506; Issue ID: ALPS07628506. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-787: Out-of-bounds Write •

CVE-2023-20633
https://notcve.org/view.php?id=CVE-2023-20633
07 Mar 2023 — In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628508; Issue ID: ALPS07628508. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-129: Improper Validation of Array Index •

CVE-2023-20627
https://notcve.org/view.php?id=CVE-2023-20627
07 Mar 2023 — In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629585. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-131: Incorrect Calculation of Buffer Size •

CVE-2023-20628
https://notcve.org/view.php?id=CVE-2023-20628
07 Mar 2023 — In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494460; Issue ID: ALPS07494460. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-248: Uncaught Exception •

CVE-2023-20604
https://notcve.org/view.php?id=CVE-2023-20604
06 Feb 2023 — In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-787: Out-of-bounds Write •

CVE-2022-32635
https://notcve.org/view.php?id=CVE-2022-32635
03 Jan 2023 — In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573237. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-787: Out-of-bounds Write •

CVE-2022-32639
https://notcve.org/view.php?id=CVE-2022-32639
03 Jan 2023 — In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494487; Issue ID: ALPS07494487. • https://corp.mediatek.com/product-security-bulletin/January-2023 • CWE-125: Out-of-bounds Read •