CVE-2023-32864

CVE-2023-32864 describes an out-of-bounds write in the display drm component of MediaTek chips caused by an incorrect bounds check. This can lead to local escalation of privilege with System-level execution privileges required; no user interaction is needed for exploitation. A patch is identified...

CVE-2023-32863

In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326314; Issue ID: ALPS07326314...

CVE-2023-32862

In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388762; Issue ID: ALPS07388762...

CVE-2023-32861

In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08059081; Issue ID: ALPS08059081...

CVE-2023-32861

In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08059081; Issue ID: ALPS08059081...

CVE-2023-32854

CVE-2023-32854 affects MediaTek devices via the ril module, with an out-of-bounds write caused by a missing bounds check. This can enable local escalation of privileges to SYSTEM level without user interaction. Patch: ALPS08240132 (Issue ALPS08240132) is referenced as the remediation. No exploita...

CVE-2023-32853

CVE-2023-32853 describes a possible out-of-bounds write in the rpmb module that could enable local privilege escalation with System-level privileges; no user interaction is required for exploitation. The description states a missing bounds check as the root cause. Patch ID: ALPS07648764; Issue ID...

CVE-2023-32850

In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016659; Issue ID: ALPS08016659...

CVE-2023-32848

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896; Issue ID: ALPS08163896...

CVE-2023-32847

CVE-2023-32847 is a MediaTek audio module vulnerability described as an out-of-bounds write caused by a missing bounds check. It could enable local escalation of privilege and requires user interaction to exploit. A fix is identified as Patch ID ALPS08241940 (Issue ID ALPS08241940). The connected...

CVE-2023-32847

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08241940; Issue ID: ALPS08241940...

CVE-2023-42738

In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42743

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42690

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42691

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42688

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2023-42693

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

Design/Logic Flaw

In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed...

Design/Logic Flaw

In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

Design/Logic Flaw

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...