PT-2023-17520 · Apu · Apu

Name of the Vulnerable Software and Affected Versions: apu affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in apu. This could lead to local information disclosure with System execution privileges needed. User...

CVE-2023-20624

CVE-2023-20624 describes a potential out-of-bounds write in the vow module due to an incorrect bounds check, which could enable local escalation of privilege with System execution privileges needed. User interaction is not required for exploitation. The issue affects MediaTek vow-related componen...

CVE-2023-20649

The CVE-2023-20649 entry concerns the MediaTek ril module. A missing bounds check can cause an out-of-bounds read, enabling local information disclosure with system execution privileges required. Exploitation does not require user interaction, but the vulnerability is confirmed as LOCAL with HIGH...

CVE-2023-20628

In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494460; Issue ID: ALPS07494460...

CVE-2023-20646

Summary: CVE-2023-20646 affects the MediaTek ril module, with a vulnerability in a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure and, under the conditions stated, system-level execution privileges are implied. No user interaction is require...

CVE-2023-20635

The CVE-2023-20635 issue concerns the keyinstall module (noted across multiple sources) where an integer overflow can lead to information disclosure. Reported impact is local information disclosure with system-level execution privileges required, and exploitation does not require user interaction...

CVE-2023-20639

CVE-2023-20639 affects the ril module in MediaTek chips, where a missing bounds check enables an out-of-bounds write that can lead to local escalation of privilege with System execution privileges required. The vulnerability is exploitable locally with no user interaction, and a patch (ALPS076285...

CVE-2023-20645

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609; Issue ID: ALPS07628609...

CVE-2023-20636

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292593; Issue ID: ALPS07292593...

CVE-2023-20630

CVE-2023-20630 affects the USB module on MediaTek chips. Root cause: a missing bounds check causing an out-of-bounds write. Impact: local escalation of privilege with System execution privileges required; no user interaction needed. Public exploitation details are not provided in the documents. R...

CVE-2023-20641

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629574; Issue ID: ALPS07629574...

CVE-2023-20627

In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629585...

CVE-2023-20649

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628607; Issue ID: ALPS07628607...

CVE-2023-20648

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628612; Issue ID: ALPS07628612...

CVE-2023-20620

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554558; Issue ID: ALPS07554558...

PT-2023-17511 · Ril · Ril

Name of the Vulnerable Software and Affected Versions: ril affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction ...

CVE-2023-20632

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628506; Issue ID: ALPS07628506...

CVE-2023-20643

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628584; Issue ID: ALPS07628584...

CVE-2023-20625

In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628532; Issue ID: ALPS07628532...

CVE-2023-20650

In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629577; Issue ID: ALPS07629577...