Privilege escalation

In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203022; Issue ID: ALPS07203022...

Race condition

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue ID: ALPS07671069...

Out-of-bounds

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588413; Issue ID: ALPS07588436...

CVE-2023-20670

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648710; Issue ID: ALPS07648710...

CVE-2023-20666

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310651; Issue ID: ALPS07292173...

PT-2023-13086 · Rpmb · Rpmb

Name of the Vulnerable Software and Affected Versions: rpmb affected versions not specified Description: The issue is related to a logic error in rpmb, which could lead to a possible out of bounds write. This might result in local escalation of privilege, requiring System execution privileges. No...

PT-2023-17534 · Gz · Gz

Name of the Vulnerable Software and Affected Versions: gz affected versions not specified Description: The issue is related to a possible double free due to a use after free in gz. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

CVE-2023-20659

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588413; Issue ID: ALPS07588413...

PT-2023-17531 · Mediatek +3 · Mt5221 +3

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In the wlan component, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privileg...

CVE-2023-20662

In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560765; Issue ID: ALPS07560765...

PT-2023-17526 · Mtee · Mtee

Name of the Vulnerable Software and Affected Versions: mtee affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User interactio...

PT-2023-17543 · Mediatek +4 · Mt5221 +37

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the wlan component, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, requiring...

PT-2023-17532 · Mediatek +3 · Mt5221 +3

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: In the wlan component, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with Syst...

PT-2023-17550 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible use after free due to a race condition in vdec. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

PT-2023-17523 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in keyinstall. This could lead to local escalation of privilege, with System execution privileges...

PT-2023-17538 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to a possible out of bounds write in audio due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

CVE-2023-20658

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07537393; Issue ID: ALPS07180396...

PT-2023-17549 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible use after free due to a race condition in vdec. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

PT-2023-17521 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a possible out of bounds write in keyinstall due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges...

CVE-2023-20655

In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203022; Issue ID: ALPS07203022...