275 results (0.008 seconds)

CVSS: 7.5EPSS: 0%CPEs: 62EXPL: 0

CVE-2025-20703

https://notcve.org/view.php?id=CVE-2025-20703

01 Sep 2025 — In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01599794; Issue ID: MSV-3708. • https://corp.mediatek.com/product-security-bulletin/September-2025 • CWE-125: Out-of-bounds Read •

CVSS: 9.8EPSS: 0%CPEs: 63EXPL: 0

CVE-2025-20708

https://notcve.org/view.php?id=CVE-2025-20708

01 Sep 2025 — In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01123853; Issue ID: MSV-4131. • https://corp.mediatek.com/product-security-bulletin/September-2025 • CWE-787: Out-of-bounds Write •

CVSS: 6.7EPSS: 0%CPEs: 67EXPL: 0

CVE-2024-20108

https://notcve.org/view.php?id=CVE-2024-20108

04 Nov 2024 — In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09082988; Issue ID: MSV-1774. • https://corp.mediatek.com/product-security-bulletin/November-2024 • CWE-787: Out-of-bounds Write •

CVSS: 7.5EPSS: 2%CPEs: 20EXPL: 0

CVE-2024-20094

https://notcve.org/view.php?id=CVE-2024-20094

07 Oct 2024 — In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00843282; Issue ID: MSV-1535. • https://corp.mediatek.com/product-security-bulletin/October-2024 • CWE-617: Reachable Assertion •

CVSS: 7.8EPSS: 0%CPEs: 59EXPL: 0

CVE-2023-32871

https://notcve.org/view.php?id=CVE-2023-32871

06 May 2024 — In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514. En DA, existe una posible omisión de permiso debido a una verificación de estado incorrecta. • https://corp.mediatek.com/product-security-bulletin/May-2024 • CWE-391: Unchecked Error Condition •

CVSS: 8.4EPSS: 0%CPEs: 43EXPL: 0

CVE-2024-20053

https://notcve.org/view.php?id=CVE-2024-20053

01 Apr 2024 — In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541764. En flashc, existe una posible escritura fuera de los límites debido a una excepción no detectada. • https://corp.mediatek.com/product-security-bulletin/April-2024 • CWE-787: Out-of-bounds Write •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-20047

https://notcve.org/view.php?id=CVE-2024-20047

01 Apr 2024 — In battery, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08587865; Issue ID: ALPS08486807. En batería, existe una posible lectura fuera de los límites debido a un desbordamiento de enteros. • https://corp.mediatek.com/product-security-bulletin/April-2024 • CWE-190: Integer Overflow or Wraparound •

CVSS: 6.7EPSS: 0%CPEs: 36EXPL: 0

CVE-2024-20032

https://notcve.org/view.php?id=CVE-2024-20032

04 Mar 2024 — In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08487630; Issue ID: MSV-1020. • https://corp.mediatek.com/product-security-bulletin/March-2024 • CWE-862: Missing Authorization •

CVSS: 6.7EPSS: 0%CPEs: 42EXPL: 0

CVE-2024-20025

https://notcve.org/view.php?id=CVE-2024-20025

04 Mar 2024 — In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; Issue ID: ALPS08541686. • https://corp.mediatek.com/product-security-bulletin/March-2024 • CWE-190: Integer Overflow or Wraparound •

CVSS: 6.7EPSS: 0%CPEs: 34EXPL: 0

CVE-2024-20022

https://notcve.org/view.php?id=CVE-2024-20022

04 Mar 2024 — In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255. • https://corp.mediatek.com/product-security-bulletin/March-2024 • CWE-125: Out-of-bounds Read •