Lucene search
K

317 matches found

Vulnrichment
Vulnrichment
added 2024/01/02 2:49 a.m.2 views

CVE-2023-32872

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08308607...

6.7AI score0.0002EPSS
Exploits0References1
CVE
CVE
added 2024/01/02 2:49 a.m.90 views

CVE-2023-32872

The CVE-2023-32872 issue is in MediaTek’s keyInstall module. It describes an out-of-bounds write caused by a missing bounds check, potentially enabling local privilege escalation to SYSTEM with no user interaction required. Public references in the connected documents consistently state this as a...

6.7CVSS6.7AI score0.0002EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/02 12:0 a.m.1 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the keyInstall module, which could lead to information disclosure...

4.4CVSS6.5AI score0.00014EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/02 12:0 a.m.2 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the keyInstall module, which may result in out-of-bounds writes...

6.7CVSS6.8AI score0.0002EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/02 12:0 a.m.2 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the keyInstall module, which could lead to information disclosure...

4.4CVSS6.5AI score0.00014EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/01 12:0 a.m.2 views

PT-2024-12351 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: In the keyInstall function, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure...

4.4CVSS4.4AI score0.00014EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/01/01 12:0 a.m.2 views

PT-2024-12352 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In the keyInstall function, there is a possible information disclosure due to a missing bounds check. This could lead to local information...

4.4CVSS4.4AI score0.00014EPSS
Exploits0References8
NVD
NVD
added 2023/11/06 4:15 a.m.16 views

CVE-2023-32835

In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08157918; Issue ID: ALPS08157918...

6.7CVSS6.8AI score0.00016EPSS
Exploits0References1
CVE
CVE
added 2023/11/06 3:50 a.m.96 views

CVE-2023-32835

CVE-2023-32835 affects MediaTek devices, specifically the keyinstall module. The issue is a memory corruption due to a type confusion vulnerability, leading to local elevation of privilege with System execution privileges needed. Exploitation requires no user interaction per the initial descripti...

6.7CVSS6.8AI score0.00016EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/06 3:50 a.m.17 views

CVE-2023-32835

In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08157918; Issue ID: ALPS08157918...

7AI score0.00016EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/11/06 12:0 a.m.2 views

PT-2023-24064

Name of the Vulnerable Software and Affected Versions keyinstall affected versions not specified Description The issue is related to a possible memory corruption due to type confusion in keyinstall. This could lead to local escalation of privilege, with System execution privileges needed. User...

6.7CVSS6.4AI score0.00016EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.2 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a type confusion issue in the keyinstall module, which may result in memory corruption...

6.7CVSS6.9AI score0.00016EPSS
Exploits0References4
OSV
OSV
added 2023/09/04 3:15 a.m.0 views

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

4.4CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2023/09/04 3:15 a.m.12 views

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

4.4CVSS4.3AI score0.00022EPSS
Exploits0References1
Prion
Prion
added 2023/09/04 3:15 a.m.26 views

Information disclosure

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

1.4CVSS4.3AI score0.00022EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/04 2:27 a.m.10 views

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

6.2AI score0.00022EPSS
Exploits0References1
CVE
CVE
added 2023/09/04 2:27 a.m.38 views

CVE-2023-20833

The CVE-2023-20833 issue concerns MediaTek devices featuring the keyinstall component. A missing bounds check in keyinstall is reported to cause local information disclosure, with the prerequisite that system execution privileges are required and no user interaction is needed for exploitation. Th...

4.4CVSS4.3AI score0.00022EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/04 2:27 a.m.14 views

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

4.7AI score0.00022EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/09/04 12:0 a.m.1 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of bounds checking in keyinstall, which could lead to information disclosure...

4.4CVSS6.5AI score0.00022EPSS
Exploits0References2
OSV
OSV
added 2023/08/07 4:15 a.m.0 views

CVE-2023-20783

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826905; Issue ID: ALPS07826905...

6.7CVSS5.9AI score
Exploits0References1
Rows per page
Query Builder