Out-of-bounds

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767826; Issue ID: ALPS07767826...

Out-of-bounds

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07733998 / ALPS07874388 For MT6880 and MT6890 only; Issue I...

PT-2023-17570 · Apu · Apu

Name of the Vulnerable Software and Affected Versions: apu affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User...

PT-2023-17565 · Adsp · Adsp

Name of the Vulnerable Software and Affected Versions: adsp affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in adsp. This could lead to local escalation of privilege, with System execution privileges needed. User...

CVE-2023-20710

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07576935; Issue ID: ALPS07576935...

CVE-2023-20719

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629583; Issue ID: ALPS07629583...

PT-2023-17574 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a possible out of bounds read in keyinstall due to a missing bounds check. This could lead to local information disclosure, with System execution privileges...

CVE-2023-20707

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628556; Issue ID: ALPS07628556...

CVE-2023-20698

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07589144; Issue ID: ALPS07589144...

PT-2023-17573 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a possible out of bounds read in keyinstall due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges...

PT-2023-17582 · Unknown · Pqframework

Name of the Vulnerable Software and Affected Versions: pqframework affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in pqframework. This could lead to local information disclosure with System execution privileges...

CVE-2023-20707

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628556; Issue ID: ALPS07628556...

CVE-2023-20696

CVE-2023-20696 affects MediaTek MT6880/MT6890 preloader. The flaw is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local elevation of privilege with System privileges and no user interaction required. Reported impact is high for confidentiality, integrity, and...

CVE-2023-20699

In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696073; Issue ID: ALPS07696073...

PT-2023-17575 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a missing bounds check, which could lead to an out of bounds read. This might result in local information disclosure, requiring System execution privileges for...

CVE-2023-20718

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645181; Issue ID: ALPS07645181...

PT-2023-17564 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a possible out of bounds read in keyinstall due to a missing bounds check. This could lead to local information disclosure, requiring System execution privileges...

CVE-2023-20718

CVE-2023-20718 affects the vcu module in MediaTek chip families. The root cause is an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with System execution privileges required and no user interaction needed. The entry lists patch ALPS07645181/ALPS07645...

CVE-2023-20695

CVE-2023-20695 concerns MediaTek preloader on MT6880/6890/6980/6990 devices. The issue is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local escalation of privilege with System execution privileges required; exploitation does not require user interaction. Pub...

CVE-2023-20706

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767860; Issue ID: ALPS07767860...