MAL-2025-4953 Malicious code in mdp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dbfb2d3ae272dd0bda3bab2d03d7f1461dc50e5b834fd48ab7510f7e55b2a5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-20012

In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05836478; Issue ID: ALPS05836478...

Unveiling the Black Box: a Multi-Layer Framework for Explaining Reinforcement Learning-Based Cyber Agents

Reinforcement Learning RL agents are increasingly used to simulate sophisticated cyberattacks, but their decision-making processes remain opaque, hindering trust, debugging, and defensive preparedness. In high-stakes cybersecurity contexts, explainability is essential for understanding how...

UBUNTU-CVE-2022-49490

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Return error code in mdp5piperelease when deadlock is detected mdp5getglobalstate runs the risk of hitting a -EDEADLK when acquiring the modeset lock, but currently mdp5piperelease doesn't check for if an error is...

The vulnerability of the MDP package for the operating system of industrial personal computers TwinCAT/BSD, related to operations beyond the buffer in memory, allows attackers to exploit their privileges, execute arbitrary code, or cause system failures.

The vulnerability of the MDP package for the operating system of industrial personal computers TwinCAT/BSD relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges, execute arbitrary code, or cause service failure...

CVE-2022-32623

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342114; Issue ID: ALPS07342114...

CVE-2022-32623

CVE-2022-32623 concerns the mdp component, with an out-of-bounds write caused by incorrect error handling. The issue can enable local escalation of privilege with system execution privileges required, and does not require user interaction to exploit. The patch reference provided is ALPS07342114 (...

PT-2023-13088 · Mdp · Mdp

Name of the Vulnerable Software and Affected Versions: mdp affected versions not specified Description: The issue is related to incorrect error handling, which can cause an out of bounds write. This could potentially lead to local escalation of privilege. System execution privileges are required...

CVE-2022-32623

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342114; Issue ID: ALPS07342114...

CVE-2022-32623: Out-of-bounds Write

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342114; Issue ID: ALPS07342114...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

Race condition

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21776

The CVE-2022-21776 issue is a race-condition triggered use-after-free in MediaTek’s MDP component leading to local privilege escalation with SYSTEM rights, no user interaction required. Multiple sources (NVD entry, Red Hat advisory, CNVD/CNNVD summaries) corroborate the same root cause and impact...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21776: Concurrent Execution using Shared Resource with Improper Synchronization

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

PT-2022-15117

Name of the Vulnerable Software and Affected Versions MDP affected versions not specified Description The issue is related to a possible use after free due to a race condition in MDP. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

CVE-2022-20052

In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS05836642; Issue ID: ALPS05836642...

CVE-2022-20067

In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836585; Issue ID: ALPS05836585...