25 matches found
CVE-2022-21746
CVE-2022-21746 affects the imgsensor component in MediaTek chips, where a missing bounds check can cause an out-of-bounds read. This can lead to local denial of service with system execution privileges, without user interaction. The entry notes a patch identified as ALPS06479698 (Issue ALPS064796...
CVE-2021-21746
creationtimestamp| type| source ---|---|--- 2021-10-20 18:35:24+00:00| seen| https://t.me/cibsecurity/30902...
CVE-2021-21746
The CVE-2021-21746 entry concerns the ZTE MF971R mobile router, where a reflective Cross-Site Scripting (XSS) vulnerability exists in the device’s web application/API layer. The issue enables an attacker to reflect user-supplied input via certain web API endpoints, leading to arbitrary JavaScript...