Lucene search
+L

361 matches found

Positive Technologies
Positive Technologies
•added 2024/01/01 12:00 a.m.•13 views

PT-2024-12352 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In the keyInstall function, there is a possible information disclosure due to a missing bounds check. This could lead to local information...

4.4CVSS4.4AI score0.00089EPSS
SaveExploits0References8
NVD
NVD
•added 2023/11/06 4:15 a.m.•37 views

CVE-2023-32835

In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08157918; Issue ID: ALPS08157918...

6.7CVSS6.8AI score0.0009EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/06 3:50 a.m.•122 views

CVE-2023-32835

CVE-2023-32835 affects MediaTek devices, specifically the keyinstall module. The issue is a memory corruption due to a type confusion vulnerability, leading to local elevation of privilege with System execution privileges needed. Exploitation requires no user interaction per the initial descripti...

6.7CVSS6.8AI score0.0009EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/06 3:50 a.m.•49 views

CVE-2023-32835

In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08157918; Issue ID: ALPS08157918...

7AI score0.0009EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/06 12:00 a.m.•8 views

PT-2023-24064

Name of the Vulnerable Software and Affected Versions keyinstall affected versions not specified Description The issue is related to a possible memory corruption due to type confusion in keyinstall. This could lead to local escalation of privilege, with System execution privileges needed. User...

6.7CVSS6.4AI score0.0009EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/11/06 12:00 a.m.•19 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a type confusion issue in the keyinstall module, which may result in memory corruption...

6.7CVSS6.9AI score0.0009EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/06 12:00 a.m.•0 views

CVE-2023-32835: Access of Resource Using Incompatible Type

In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08157918; Issue ID: ALPS08157918...

6.7CVSS7AI score0.0009EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/02 12:00 a.m.•23 views

The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a hacker to enhance their privileges.

The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to the execution of operations outside the buffer in memory due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

6.8CVSS7AI score0.00093EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/09/29 12:00 a.m.•26 views

The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to insufficient protection of sensitive data due to incorrect validation of input data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.00111EPSS
SaveExploits0References4
NVD
NVD
•added 2023/09/04 3:15 a.m.•28 views

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

4.4CVSS4.3AI score0.0009EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/04 3:15 a.m.•12 views

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

4.4CVSS5.9AI score0.0009EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/04 3:15 a.m.•36 views

Information disclosure

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

1.4CVSS4.3AI score0.0009EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/04 2:27 a.m.•45 views

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

4.7AI score0.0009EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/04 2:27 a.m.•11 views

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

6.2AI score0.0009EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/04 2:27 a.m.•76 views

CVE-2023-20833

The CVE-2023-20833 issue concerns MediaTek devices featuring the keyinstall component. A missing bounds check in keyinstall is reported to cause local information disclosure, with the prerequisite that system execution privileges are required and no user interaction is needed for exploitation. Th...

4.4CVSS4.3AI score0.0009EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/04 12:00 a.m.•3 views

CVE-2023-20833: Missing Authorization

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764...

4.4CVSS5.6AI score0.0009EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/09/04 12:00 a.m.•9 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of bounds checking in keyinstall, which could lead to information disclosure...

4.4CVSS6.5AI score0.0009EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/08/11 12:00 a.m.•18 views

The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the system...

4.4CVSS5.5AI score0.00089EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/08/11 12:00 a.m.•14 views

The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a hacker to enhance their privileges.

The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS6.6AI score0.00093EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/08/11 12:00 a.m.•24 views

The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a hacker to gain access to confidential information.

The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to access confidential information...

4.4CVSS5.5AI score0.00091EPSS
SaveExploits0References2
Rows per page
Query Builder