CVE-2023-20749

The CVE-2023-20749 issue affects the swpm module in MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. This could lead to local escalation to SYSTEM privileges with no user interaction required. A patch is available (ALPS07780926/ALPS07780926). Exploitation stat...

CVE-2023-20744

The CVE-2023-20744 vulnerability affects the vcu module in MediaTek chips. It is described as a use-after-free caused by a logic error, enabling local escalation of privilege with System execution privileges required and no user interaction needed. Connected documents corroborate a fault in vcu w...

CVE-2023-20743

The CVE-2023-20743 issue affects the vcu module in MediaTek chips. It stems from improper locking that enables an out-of-bounds write, potentially allowing local escalation of privilege to SYSTEM level without user interaction. The vulnerability impact is described as high for confidentiality, in...

CVE-2023-20740

In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559819; Issue ID: ALPS07559840...

CVE-2023-20739

In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559819; Issue ID: ALPS07559819...

CVE-2023-20739

The CVE-2023-20739 issue affects the vcu component in MediaTek chips. It describes a memory corruption resulting from a logic error, enabling local escalation of privilege with SYSTEM execution privileges, without user interaction. Reported patch ID: ALPS07559819 (Issue ALPS07559819). Connected s...

CVE-2023-20738

CVE-2023-20738 affects the vcu component in MediaTek chips, caused by a missing bounds check that permits an out-of-bounds write. The vulnerability can lead to local escalation of privilege with SYSTEM-level execution, and exploitation does not require user interaction. Public references consiste...

CVE-2023-20737

The CVE-2023-20737 issue concerns the vcu component in MediaTek devices, where an improper locking leads to a use-after-free condition. This vulnerability can enable local escalation of privileges to SYSTEM with no user interaction required. Affected behavior is described as a local exploit path,...

CVE-2023-20736

CVE-2023-20736 affects the vcu component. The vulnerability is an out-of-bounds write caused by a race condition, enabling local escalation of privilege with System execution privileges required and no user interaction. A patch is referenced: ALPS07645149 (Issue ALPS07645189). Exploitation detail...

CVE-2023-20735

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Issue ID: ALPS07645178...

CVE-2023-20735

CVE-2023-20735 concerns the vcu component in MediaTek chips, where a missing bounds check can cause an out-of-bounds write. The under-lying flaw is a lack of boundary verification in vcu, potentially enabling local escalation of privilege with System-level execution privileges required. Exploitat...

CVE-2023-20734

CVE-2023-20734 affects the vcu module in MediaTek chips. The issue is described as an out-of-bounds write due to a missing bounds check, potentially enabling local escalation of privilege with SYSTEM privileges and no user interaction required. A patch is available (ALPS07645149; ALPS07645184). C...

CVE-2023-20734

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Issue ID: ALPS07645184...

CVE-2022-48392

In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2022-48392

In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

Privilege escalation

In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

Privilege escalation

In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

Privilege escalation

In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2023-30863

In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2022-48392

CVE-2022-48392 affects Unisoc chipsets via the Android dialer service, where a missing permission check can enable local escalation of privilege without requiring extra execution privileges. The CVSS v3.1 vector is LV, LO, PRL, UI N, S U, C H, I H, A H, with a base score of 7.8 (HIGH). Affected i...