CVE-2022-20056

CVE-2022-20056 affects the preloader (usb) on MediaTek-based devices, with an out-of-bounds write due to a missing bounds check. The issue can lead to local privilege escalation when an attacker has physical access, with user interaction required for exploitation. Impact is described as partial c...

CVE-2022-20056

In preloader usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2022-20055

In preloader usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2022-20055

CVE-2022-20055 concerns the preloader (usb) in MediaTek-based devices where an out-of-bounds write occurs due to a missing bounds check. The vulnerability could enable local escalation of privilege for an attacker with physical access, with no extra execution privileges required; exploitation req...

PT-2022-14306

Name of the Vulnerable Software and Affected Versions preloader usb affected versions not specified Description The issue is related to a missing bounds check in the preloader usb, which could lead to a possible out of bounds write. This might result in local escalation of privilege for an attack...

PT-2022-14307 · Preloader · Preloader

Name of the Vulnerable Software and Affected Versions: preloader usb affected versions not specified Description: The issue is related to a missing proper image authentication in the preloader, which could lead to a permission bypass. This might result in a local escalation of privilege for an...

PT-2022-14302

Name of the Vulnerable Software and Affected Versions Preloader usb affected versions not specified Description The issue is related to a missing bounds check in the preloader, which can lead to an out of bounds write. This could result in local escalation of privilege for an attacker with physic...

CVE-2022-20058: Out-of-bounds Write

In preloader usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2022-20060: Missing Authentication for Critical Function

In preloader usb, there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitatio...

PT-2022-14303

Name of the Vulnerable Software and Affected Versions Preloader usb affected versions not specified Description The issue is related to a missing bounds check in the preloader, which can lead to an out of bounds write. This could result in local escalation of privilege for an attacker with physic...

PT-2022-14305

Name of the Vulnerable Software and Affected Versions preloader usb affected versions not specified Description The issue is related to a missing bounds check in the preloader usb, which could lead to a possible out of bounds write. This might result in local escalation of privilege for an attack...

CVE-2022-20059: Out-of-bounds Write

In preloader usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2022-20056: Out-of-bounds Write

In preloader usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2022-20055: Out-of-bounds Write

In preloader usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

WordPress Preloader for Divi plugin <= 1.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Preloader for Divi plugin versions = 1.4. Solution No patched version available...

WordPress Preloader for Divi plugin <= 1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Preloader for Divi plugin versions = 1.4. Solution No patched version available...

CVE-2022-20034

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20034

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20034

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for...

Privilege escalation

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for...