CVE-2023-20735

CVE-2023-20735 concerns the vcu component in MediaTek chips, where a missing bounds check can cause an out-of-bounds write. The under-lying flaw is a lack of boundary verification in vcu, potentially enabling local escalation of privilege with System-level execution privileges required. Exploitat...

CVE-2023-20734

CVE-2023-20734 affects the vcu module in MediaTek chips. The issue is described as an out-of-bounds write due to a missing bounds check, potentially enabling local escalation of privilege with SYSTEM privileges and no user interaction required. A patch is available (ALPS07645149; ALPS07645184). C...

CVE-2023-20734

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Issue ID: ALPS07645184...

CVE-2023-20732

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573480; Issue ID: ALPS07573480...

CVE-2023-20731

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573495; Issue ID: ALPS07573495...

CVE-2023-20730

CVE-2023-20730 concerns the MediaTek WLAN module, where a missing bounds check enables a possible out-of-bounds read. The result is local information disclosure, with system execution privileges required for exploitation and no user interaction needed. Publicly documented patch: ALPS07573552 (Iss...

CVE-2023-20728

CVE-2023-20728 affects the MediaTek wlan module. Root cause: a missing bounds check leads to an out-of-bounds read. Impact: local information disclosure with system execution privileges required; exploitation does not require user interaction. A patch is available (Patch ID: ALPS07573603; Issue I...

CVE-2022-48438

In cpdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-48439

In cpdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

PT-2023-17616 · Keymange · Keymange

Name of the Vulnerable Software and Affected Versions: keymange affected versions not specified Description: The issue is related to a possible out of bounds write in keymange due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed...

PT-2023-17589 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: Wlan affected versions not specified Description: The issue is related to a possible out of bounds read in wlan due to a missing bounds check. This could lead to local information disclosure, requiring System execution privileges for...

PT-2023-15781 · Unknown · Cp Dump Driver

Name of the Vulnerable Software and Affected Versions: cp dump driver affected versions not specified Description: The issue is related to a missing bounds check in the cp dump driver, which could lead to a possible out of bounds write. This may result in a local denial of service and requires...

PT-2023-17578 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: wlan affected versions not specified Description: The issue is related to a possible out of bounds write in wlan due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2023-17594 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: wlan affected versions not specified Description: The issue is related to a possible out of bounds read in wlan due to a missing bounds check. This could lead to local information disclosure, requiring System execution privileges for...

PT-2023-17596 · Vcu · Vcu

Name of the Vulnerable Software and Affected Versions: vcu affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction ...

PT-2023-17577 · Mediatek +3 · Mt5221 +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in wlan due to a missing bounds check. This could lead to local escalation of privilege, with...

H3C Magic R300 Stack Overflow Vulnerability (CNVD-2023-57675)

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability caused by a failure to properly bounds check the SetAPWifiorLedInfoById interface on /goform/aspForm. An authenticated, remote attacker could exploit this...

CVE-2023-25752

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox 111, Firefox ESR 102.9, and Thunderbird 102.9...

PUB-A-251427561

In btmaclprocessscacmplpkt of btmacl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-255304665

In btmvendorspecificevt of btmdevctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...