CVE-2025-20798

MediaTek chipsets/Battery component contains an out-of-bounds write due to a missing bounds check, enabling local privilege escalation if an attacker already has System privileges. User interaction is not required. Patch ALPS10315812 and Issue MSV-5533 address this. Exploitation details are not p...

CVE-2025-20797

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5534...

CVE-2025-20797

CVE-2025-20797 describes an out-of-bounds write in the battery component due to a missing bounds check. The issue can enable local privilege escalation to System level without user interaction. Affected context across multiple advisories/feeds references the same root cause and patch: ALPS1031581...

CVE-2025-20797

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315812; Issue ID: MSV-5534...

CVE-2025-20796

In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553...

CVE-2025-20796

In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553...

CVE-2025-20795

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141...

CVE-2025-20795

CVE-2025-20795 describes an out-of-bounds write in the KeyInstall component caused by a missing bounds check, enabling local escalation to System privileges. Exploitation does not require user interaction per the description. Public records reference a patch: ALPS10276761 (MSV-5141). The CVSS met...

CVE-2025-20795

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141...

PT-2026-1376

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User interaction is...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

PT-2026-1371

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free in display. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from an out-of-bounds write due to improper input validation, which could result in local elevation of privilege...

PT-2026-1391

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use after free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to achieve local escalation o...

PT-2026-1389

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor with System privileges to achieve local escalation o...

PT-2026-1373

Name of the Vulnerable Software and Affected Versions display affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a malicious actor with System privileges to escalate privileges locally. User interactio...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets, which stems from an out-of-bounds write due to a lack of bounds checking, and could lead to local elevation of privilege...

PT-2026-1390

Name of the Vulnerable Software and Affected Versions dpe affected versions not specified Description A memory corruption issue exists in dpe due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor to gain local system privileges, provided they alrea...

PT-2026-1368

Name of the Vulnerable Software and Affected Versions versions prior to ALPS10184870 Description An out-of-bounds write issue exists due to a missing bounds check in the display component. Successful exploitation could allow a malicious actor who already has System privileges to gain local...

MediaTek chipsets 安全漏洞

MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...