CVE-2025-20796

In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553...

CVE-2025-20795

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141...

CVE-2025-20795

CVE-2025-20795 describes an out-of-bounds write in the KeyInstall component caused by a missing bounds check, enabling local escalation to System privileges. Exploitation does not require user interaction per the description. Public records reference a patch: ALPS10276761 (MSV-5141). The CVSS met...

CVE-2025-20795

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

PT-2026-1373

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interactio...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from an out-of-bounds write due to improper input validation, which could result in local elevation of privilege...

PT-2026-1371

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free in display. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User...

PT-2026-1376

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User interaction is...

PT-2026-1391

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use after free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to achieve local escalation o...

PT-2026-1389

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to achieve local escalation o...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets, which stems from the fact that reuse after release may lead to memory corruption and may result in local elevation of privilege if a malicious attacker has...

PT-2026-1375

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10149882 Description A memory corruption issue exists in display due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to gain local escalation of...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets, which stems from an out-of-bounds write due to a lack of bounds checking, and could lead to local elevation of privilege...

PT-2026-1382

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10315812 Description An out-of-bounds write issue exists in battery due to a missing bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User...

PT-2026-1390

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor to gain local system privileges, provided they alrea...

AirVPN Eddie 安全漏洞

AirVPN Eddie is a proxy client from AirVPN Open Source. A security vulnerability exists in AirVPN Eddie version 2.24.6, which stems from an insecure XPC service and could lead to local unprivileged user privileges being elevated to root...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets, which stems from an out-of-bounds write due to a lack of bounds checking, and could lead to local elevation of privilege...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets, which stems from the fact that reuse after release could lead to memory corruption and could lead to local elevation of privilege if a malicious attacker has...