部分MediaTek芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a possible out-of-bounds write in display due to a lack of boundary checking, resulting in local privilege escalation. The following products a...

CVE-2023-20725

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734004 / ALPS07874358 For MT6880, MT6890, MT6980, MT6990...

CVE-2023-20725

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734004 / ALPS07874358 For MT6880, MT6890, MT6980, MT6990...

Out-of-bounds

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734004 / ALPS07874358 For MT6880, MT6890, MT6980, MT6990...

CVE-2023-20725

CVE-2023-20725 affects MediaTek chip preloader: an out-of-bounds write caused by a missing bounds check can lead to local escalation of privilege with System execution privileges required. Exploitation requires no user interaction. Affected devices/versions include MT6880, MT6890, MT6980, and MT6...

CVE-2023-20695

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734012 / ALPS07874363 For MT6880, MT6890, MT6980 and MT69...

Information disclosure

In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07735968 / ALPS07884552 For MT6880, MT6890, MT6980,...

CVE-2023-20726

The CVE-2023-20726 entry describes a GPS location information disclosure in the MediaTek mnld module caused by a missing permission check. Impact is local information disclosure with no privileges or user interaction required (CVSS v3.1 base score 3.3, LOW). Affected component: mnld in MediaTek S...

CVE-2023-20695

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734012 / ALPS07874363 For MT6880, MT6890, MT6980 and MT69...

CVE-2023-20695

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734012 / ALPS07874363 For MT6880, MT6890, MT6980 and MT69...