CVE-2023-20704

The CVE-2023-20704 involves the apu component in MediaTek chips, where a missing bounds check can trigger an out-of-bounds read and local information disclosure without requiring user interaction. Affected element: apu on MediaTek hardware. Root cause: bounds-check omission leading to memory read...

CVE-2023-20710

The CVE-2023-20710 entry concerns the MediaTek keyinstall component, where an out-of-bounds read can occur due to a missing bounds check. This vulnerability could lead to local information disclosure with system-level privileges required for exploitation, and exploitation reportedly does not requ...

PT-2023-17580 · Vcu · Vcu

Name of the Vulnerable Software and Affected Versions: vcu affected versions not specified Description: The issue is related to a possible leak of DMA buffer due to a race condition, which could lead to local information disclosure. System execution privileges are needed for exploitation, and use...

PT-2023-17576 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a possible out of bounds read in keyinstall due to a missing bounds check. This could lead to local information disclosure, requiring System execution privileges...

CVE-2023-20711

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07581668; Issue ID: ALPS07581668...

CVE-2023-20710

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07576935; Issue ID: ALPS07576935...

CVE-2023-21118

In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

CVE-2023-20709

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07576951; Issue ID: ALPS07576951...

CVE-2023-21112

In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-...

CVE-2023-20703

CVE-2023-20703 concerns the MediaTek chip apu module where a missing bounds check can cause an out-of-bounds read, potentially exposing local information without extra privileges or user interaction. Multiple sources (NVD, Red Hat, CVE/CVE-list, PRION) corroborate the issue and its basic impact, ...

PT-2023-17570 · Apu · Apu

Name of the Vulnerable Software and Affected Versions: apu affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User...

CVE-2023-20717

In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645185; Issue ID: ALPS07645185...

CVE-2023-20717

CVE-2023-20717 relates to the vcu module where a race condition can leak a DMA buffer, enabling local information disclosure with SYSTEM privileges and no user interaction. A patch (ALPS07645185) exists; no exploitation details are provided in the connected documents. References show consistent d...

CVE-2023-20705

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767870; Issue ID: ALPS07767870...

PT-2023-17582 · Unknown · Pqframework

Name of the Vulnerable Software and Affected Versions: pqframework affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in pqframework. This could lead to local information disclosure with System execution privileges...

PT-2023-17587 · Mnld · Mnld

Name of the Vulnerable Software and Affected Versions: mnld affected versions not specified Description: The issue is related to a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User...

CVE-2023-20709

CVE-2023-20709 affects the keyinstall module in MediaTek systems. The issue is an out-of-bounds read caused by a missing bounds check, leading to potential local information disclosure and requiring System execution privileges for exploitation. User interaction is not needed. References to patche...

CVE-2023-20717

In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645185; Issue ID: ALPS07645185...

CVE-2023-20914

In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there is a possible way for the work profile to read SMS messages due to a permissions bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is not...

CVE-2023-20719

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629583; Issue ID: ALPS07629583...