Page 94 of 2341 results (0.011 seconds)

CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0

06 Feb 2023 — In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. • https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210 • CWE-129: Improper Validation of Array Index •

CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0

06 Feb 2023 — In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. • https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210 • CWE-129: Improper Validation of Array Index •

CVSS: 6.7EPSS: 0%CPEs: 15EXPL: 0

06 Feb 2023 — In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. • https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210 • CWE-862: Missing Authorization •

CVSS: 4.7EPSS: 0%CPEs: 15EXPL: 0

06 Feb 2023 — In wlan driver, there is a race condition. This could lead to local denial of service in wlan services. • https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 6.7EPSS: 0%CPEs: 16EXPL: 0

06 Feb 2023 — In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed. • https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210 • CWE-862: Missing Authorization •

CVSS: 4.4EPSS: 0%CPEs: 53EXPL: 0

06 Feb 2023 — In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550104. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.7EPSS: 0%CPEs: 29EXPL: 0

06 Feb 2023 — In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-787: Out-of-bounds Write •

CVSS: 6.4EPSS: 0%CPEs: 25EXPL: 0

06 Feb 2023 — In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363469; Issue ID: ALPS07363469. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-662: Improper Synchronization •

CVSS: 6.7EPSS: 0%CPEs: 46EXPL: 0

06 Feb 2023 — In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07560720. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVSS: 6.7EPSS: 0%CPEs: 27EXPL: 0

06 Feb 2023 — In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159. • https://corp.mediatek.com/product-security-bulletin/February-2023 • CWE-667: Improper Locking •