Lucene search
+L

50 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/05 12:00 a.m.•1 views

CVE-2024-20009: Out-of-bounds Write

In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150...

8.8CVSS5.9AI score0.00373EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/02/05 12:00 a.m.•13 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from an incorrect boundary check in the alac decoder module, which could lead to information disclosure...

9.8CVSS6.5AI score0.00446EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/04 12:00 a.m.•14 views

PT-2024-18499 · Unknown · Alac Decoder

Name of the Vulnerable Software and Affected Versions: alac decoder affected versions not specified Description: In the alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges neede...

9.8CVSS9AI score0.00446EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/02/04 12:00 a.m.•15 views

PT-2024-18496 · Unknown · Alac Decoder

Name of the Vulnerable Software and Affected Versions: alac decoder affected versions not specified Description: The issue is related to an incorrect error handling in the alac decoder, which could lead to a possible out of bounds write. This could result in remote escalation of privilege with no...

8.8CVSS8.6AI score0.00373EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/08/18 12:00 a.m.•15 views

The vulnerability of the libMtkOmxAlacDec.so library, a decoder for ALAC microprogramming software for Sony Xperia phones of models 1, 5, and Pro, allows a perpetrator to…

The vulnerability of the libMtkOmxAlacDec.so decoder for ALAC microprogramming software in Sony Xperia models 1, 5, and Pro is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

7.5CVSS8.5AI score0.10242EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2022/06/29 12:00 a.m.•17 views

The vulnerability of decoders for ALAC files from microprogramming software for MediaTek’s MT6570, MT6580, MT6735, and MT6737 chips allows attackers to enhance their privileges.

The vulnerability of ALAC-file decoders in microprogramming software for MediaTek’s MT6570, MT6580, MT6735, and MT6737 chips is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.8AI score0.00538EPSS
SaveExploits0References7Affected Software2
attackerkb
attackerkb
•added 2022/05/03 8:15 p.m.•9 views

CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.5CVSS6.1AI score0.00112EPSS
SaveExploits0References2
OSV
OSV
•added 2022/05/03 8:15 p.m.•14 views

CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.5CVSS6.2AI score0.00112EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/03 8:15 p.m.•33 views

CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.5CVSS0.00112EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/03 8:15 p.m.•30 views

Out-of-bounds

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

2.1CVSS5AI score0.00112EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/05/03 7:58 p.m.•102 views

CVE-2022-20092

The CVE-2022-20092 issue affects MediaTek devices with the alac decoder. Root cause: missing bounds checks cause an out-of-bounds read, enabling local information disclosure without execution privileges. Exploitation is reported as requiring local access; user interaction is not needed. Patch/mit...

5.5CVSS5AI score0.00112EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/05/03 7:58 p.m.•41 views

CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.3AI score0.00112EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•4 views

CVE-2022-20092: Out-of-bounds Read

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

5.5CVSS6AI score0.00112EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•17 views

The vulnerability of the Alac decoder in Microprogramming Software Microchip MediaTek MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797—allows a hacker to disclose protected information.

The vulnerability of the Alac decoder in microprogramming software for MediaTek’s MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6799, MT6833,...

5.5CVSS6.2AI score0.00511EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2021/12/17 5:15 p.m.•9 views

CVE-2021-0674

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

5.5CVSS5.9AI score0.00511EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/17 5:15 p.m.•28 views

CVE-2021-0674

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

5.5CVSS0.00511EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/17 5:15 p.m.•9 views

CVE-2021-0674

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

5.5CVSS6.4AI score0.00511EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/17 5:15 p.m.•32 views

Out-of-bounds

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

2.1CVSS5.1AI score0.00511EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/17 4:10 p.m.•35 views

CVE-2021-0674

In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237...

5.4AI score0.00511EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/17 4:10 p.m.•76 views

CVE-2021-0674

CVE-2021-0674 affects the ALAC (ALAC decoder) used in MediaTek and related chipsets. The issue is an out-of-bounds read caused by an incorrect bounds check in the ALAC decoder, leading to local information disclosure without user interaction. Affected state: local access, no privileges required. ...

5.5CVSS5.7AI score0.00511EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder