CVE-2023-20775

CVE-2023-20775 describes a local out-of-bounds write in the display code due to a missing bounds check, enabling local privilege escalation with System rights; no user interaction required. Impacted hardware is reported as various MediaTek chips (per connected references), with a patch identified...

CVE-2023-20774

CVE-2023-20774 involves an out-of-bounds read in the display path due to a missing bounds check, enabling local privilege escalation with System execution privileges required and no user interaction. Multiple connected sources (MediaTek-related advisories and vendor feeds) confirm the issue affec...

CVE-2023-20774

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292228; Issue ID: ALPS07292228...

CVE-2023-20774

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292228; Issue ID: ALPS07292228...

CVE-2023-20771

In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046...

CVE-2023-20771

In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046...

CVE-2023-25516

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

CVE-2023-25516

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

CVE-2023-25516

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

CVE-2023-20774: Out-of-bounds Read

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292228; Issue ID: ALPS07292228...

PT-2023-17634 · Mediatek +1 · Mt6789 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with...

Some MediaTek chips have buffer error vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some of the MediaTek chips, which stems from a possible read out-of-bounds situation in the display due to a lack of boundary checking, leading to local information disclosure...

Some MediaTek chips have buffer error vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a possible memory corruption in display due to a competitive condition, resulting in local privilege escalation. The following products are...

Some MediaTek chips have buffer error vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a possible out-of-bounds read in display due to a lack of boundary checking, resulting in local privilege escalation. The following products ar...

Some MediaTek chips have buffer error vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a possible out-of-bounds write in display due to a lack of boundary checking, resulting in local privilege escalation. The following products a...

PT-2023-17631 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: There is a possible memory corruption due to a race condition in the display. This could lead to local escalation of privilege with System execution...

CVE-2023-25516: Integer Overflow or Wraparound

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

SUSE CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

EMUI Auth Bypass

The vulnerability of the EMUI operating system of HarmonyOS is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to initiate the display of advertisements or other random windows at any time...

Linux MSM DRM Kernel Heap Buffer Overflow DoS

The vulnerability of the dpucrtcatomiccheck function in the drivers/gpu/drm/msm/disp/dpu1/dpucrtc.c file of the Linux operating system’s MSM DRM kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...