CVE-2022-26439

In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220420020; Issue ID: GN20220420020...

CVE-2022-26436

The vulnerability CVE-2022-26436 affects the emi mpu component and is caused by a missing bounds check, leading to an out-of-bounds read. This can lead to local information disclosure with System execution privileges required, and no user interaction is needed. A patch identified as ALPS07023666 ...

CVE-2022-26436

In emi mpu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07023666; Issue ID: ALPS07023666...

CVE-2022-26435

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435...

CVE-2022-26435

CVE-2022-26435: A type confusion in the mailbox component can cause an out-of-bounds write, enabling local privilege escalation to System level without user interaction. Documents (NVD/Red Hat/NVD list) cite Patch ALPS07138435/Issue ALPS07138435 as the remediation. Exploitation status is not prov...

CVE-2022-26434

In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138450; Issue ID: ALPS07138450...

CVE-2022-26433

The CVE-2022-26433 entry concerns MediaTek mailbox (mailbox controller) with a type-confusion caused out-of-bounds write leading to local privilege escalation to SYSTEM. Affected component: mailbox handling in MediaTek devices; root cause: type confusion resulting in out-of-bounds write (exact co...

CVE-2022-26432

In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032542; Issue ID: ALPS07032542...

CVE-2022-26431

In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032553; Issue ID: ALPS07032553...

CVE-2022-26430

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521...

CVE-2022-26428

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260...

CVE-2022-26427

In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07085540; Issue ID: ALPS07085540...

CVE-2022-26427

CVE-2022-26427: In camera isp, there is an out-of-bounds write due to a missing bounds check that can lead to local privilege escalation with System execution privileges required. No user interaction is needed. Patch ALPS07085540 / Issue ALPS07085540. Public references point to MediaTek/ALPS advi...

CVE-2022-26426

The CVE-2022-26426 entry concerns MediaTek’s camera ISP (in-camera image signal processor) with an out-of-bounds write caused by a missing bounds check. The vulnerability could allow local privilege escalation with System execution privileges, and does not require user interaction. Connected sour...

CVE-2022-21792

CVE-2022-21792 affects the camera ISP in MediaTek devices, with an out-of-bounds write caused by a missing bounds check. The vulnerability can allow local escalation of privilege with System execution privileges, and requires no user interaction to exploit. A patch is available under patch ID ALP...

CVE-2022-21791

In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06478059; Issue ID: ALPS06478059...

CVE-2022-21791

CVE-2022-21791 affects MediaTek camera ISP components, causing an out-of-bounds read due to a missing bounds check. This could enable local information disclosure with SYSTEM execution privileges needed and requires no user interaction. Patch ALPS06478059 (Issue ALPS06478059) has been issued; aff...

CVE-2022-21790

In camera isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479306; Issue ID: ALPS06479306...

CVE-2022-21790

The CVE-2022-21790 issue concerns MediaTek camera ISP hardware where a missing bounds check allows an out-of-bounds read. This can lead to local information disclosure with system-level privileges required; exploitation does not require user interaction. A fix is identified as patch ALPS06479306 ...

PUB-A-208269510

In st21nfclocsetpolaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...