Out-of-bounds

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704482...

Out-of-bounds

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704393...

Out-of-bounds

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704508...

CVE-2022-21787

CVE-2022-21787 affects MediaTek audio DSP components. The root cause is a missing bounds check that allows an out-of-bounds write, enabling local escalation of privilege with System execution privileges. Exploitation does not require user interaction. A patch is referenced as ALPS06558844 (Issue ...

CVE-2022-21786

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822; Issue ID: ALPS06558822...

CVE-2022-21785

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06807363; Issue ID: ALPS06807363...

CVE-2022-21783

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704482...

CVE-2022-21783

CVE-2022-21783 affects MediaTek WLAN driver and is caused by a missing bounds check that enables an out-of-bounds write. This leads to local privilege escalation with SYSTEM execution privileges required and no user interaction. Public references (including Red Hat/RedHat-affiliated postings and ...

CVE-2022-21782

CVE-2022-21782 affects the MediaTek WLAN driver. The root cause is a missing bounds check leading to an out-of-bounds write, enabling local privilege escalation to SYSTEM with no user interaction required. A patch is available (ALPS06704526; ALPS06704508). Exploitation details are not provided in...

CVE-2022-21781

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704433...

CVE-2022-21781

The CVE-2022-21781 entry concerns a MediaTek WLAN driver with an out-of-bounds write caused by a missing bounds check. The vulnerability could allow local escalation of privilege to System level with no user interaction required. Impact is described as partial confidentiality/integrity/availabili...

CVE-2022-21780

CVE-2022-21780 affects the MediaTek WLAN driver. It is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation with SYSTEM execution privileges required and no user interaction. CVSSv3.1: 6.7 (LOCAL, HIGH impact on Confidentiality/Integrity/Availability; HIGH ...

CVE-2022-21780

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704526...

CVE-2022-21779

In WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06704526; Issue ID: ALPS06704393...

CVE-2022-21779

CVE-2022-21779 affects the MediaTek WLAN driver (multiple MediaTek chips). The vulnerability is a missing bounds check that enables a local out-of-bounds write, leading to privilege escalation with SYSTEM execution privileges required; no user interaction is needed. Patch ID: ALPS06704526; Issue ...

CVE-2022-21777

CVE-2022-21777 affects MediaTek Autoboot: a permission bypass caused by a missing permission check enables local escalation of privileges without user interaction. Multiple sources (NVD entry and Red Hat/CVE pages) describe the issue as allowing an attacker with local access to elevate privileges...

CVE-2022-21777

In Autoboot, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06713894; Issue ID: ALPS06713894...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21775

CVE-2022-21775 affects MediaTek’s sched driver. The issue is a use-after-free caused by improper locking, enabling local escalation of privileges with System privileges required; user interaction is not needed for exploitation. Affected component: sched driver; root cause: improper locking leadin...

CVE-2022-21774

In TEEI driver, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641447; Issue ID: ALPS06641447...