Lucene search
+L

43 matches found

Positive Technologies
Positive Technologies
added 2024/02/04 12:0 a.m.10 views

PT-2024-18496 · Unknown · Alac Decoder

Name of the Vulnerable Software and Affected Versions: alac decoder affected versions not specified Description: The issue is related to an incorrect error handling in the alac decoder, which could lead to a possible out of bounds write. This could result in remote escalation of privilege with no...

8.8CVSS8.6AI score0.00378EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/04 12:0 a.m.8 views

PT-2024-18499 · Unknown · Alac Decoder

Name of the Vulnerable Software and Affected Versions: alac decoder affected versions not specified Description: In the alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges neede...

9.8CVSS9AI score0.00453EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:0 a.m.8 views

The vulnerability of the libMtkOmxAlacDec.so library, a decoder for ALAC microprogramming software for Sony Xperia phones of models 1, 5, and Pro, allows a perpetrator to…

The vulnerability of the libMtkOmxAlacDec.so decoder for ALAC microprogramming software in Sony Xperia models 1, 5, and Pro is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

7.5CVSS8.5AI score0.10011EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.12 views

The vulnerability of decoders for ALAC files from microprogramming software for MediaTek’s MT6570, MT6580, MT6735, and MT6737 chips allows attackers to enhance their privileges.

The vulnerability of ALAC-file decoders in microprogramming software for MediaTek’s MT6570, MT6580, MT6735, and MT6737 chips is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.8AI score0.00538EPSS
SaveExploits0References7Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/05/03 8:15 p.m.5 views

CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.5CVSS6.1AI score0.00105EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/03 8:15 p.m.26 views

CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.5CVSS0.00105EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/03 8:15 p.m.6 views

CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.5CVSS6.2AI score0.00105EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/03 8:15 p.m.23 views

Out-of-bounds

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

2.1CVSS5AI score0.00105EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/05/03 7:58 p.m.89 views

CVE-2022-20092

The CVE-2022-20092 issue affects MediaTek devices with the alac decoder. Root cause: missing bounds checks cause an out-of-bounds read, enabling local information disclosure without execution privileges. Exploitation is reported as requiring local access; user interaction is not needed. Patch/mit...

5.5CVSS5AI score0.00105EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/03 7:58 p.m.30 views

CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.3AI score0.00105EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.11 views

The vulnerability of the Alac decoder in Microprogramming Software Microchip MediaTek MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797—allows a hacker to disclose protected information.

The vulnerability of the Alac decoder in microprogramming software for MediaTek’s MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833,...

5.5CVSS6.2AI score0.00511EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2021/12/17 5:15 p.m.3 views

CVE-2021-0674

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

5.5CVSS5.9AI score
SaveExploits0References1
NVD
NVD
added 2021/12/17 5:15 p.m.23 views

CVE-2021-0674

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

5.5CVSS0.00511EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/17 5:15 p.m.25 views

Out-of-bounds

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

2.1CVSS5.1AI score0.00511EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/17 4:10 p.m.25 views

CVE-2021-0674

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

5.4AI score0.00511EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/17 4:10 p.m.66 views

CVE-2021-0674

CVE-2021-0674 affects the ALAC (ALAC decoder) used in MediaTek and related chipsets. The issue is an out-of-bounds read caused by an incorrect bounds check in the ALAC decoder, leading to local information disclosure without user interaction. Affected state: local access, no privileges required. ...

5.5CVSS5.7AI score0.00511EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/12/15 7:15 p.m.4 views

CVE-2021-0675

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064258...

7.8CVSS7.4AI score0.00538EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/15 7:15 p.m.21 views

CVE-2021-0675

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064258...

7.8CVSS0.00538EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/15 7:15 p.m.24 views

Out-of-bounds

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064258...

7.2CVSS7.7AI score0.00538EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/12/15 6:5 p.m.132 views

CVE-2021-0675

The CVE-2021-0675 entry affects the alac decoder and is due to an incorrect bounds check, causing an out-of-bounds write that enables local privilege escalation without user interaction. Documented impact and exploitation status indicate local escalation of privilege with complete confidentiality...

7.8CVSS7.8AI score0.00538EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder