MediaTek 安全漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a logic error in jpegs that may be reused after release, which could lead to a local privilege escalation that requires system execution...

CVE-2022-32648

The CVE-2022-32648 entry describes a use-after-free due to a race condition in the disp component, enabling local privilege escalation with SYSTEM privileges and no user interaction. Multiple sources (NVD/Red Hat/PRION/CVE records) confirm the issue and the same patch identifier: ALPS06535964 (Is...

CVE-2022-32639

In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494487; Issue ID: ALPS07494487...

CVE-2022-32651

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225857; Issue ID: ALPS07225857...

CVE-2022-32659

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066...

MediaTek 安全漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a competing condition in the disp, which may be subject to post-release reuse, which could lead to a local privilege escalation that requires...

MediaTek 芯片 缓冲区错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek Chipsets that stems from improper input validation in ccu, which could result in out-of-bounds writes, which could lead to local privilege escalation requiring syste...

CVE-2022-32652

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262617; Issue ID: ALPS07262617...

CVE-2022-32645

CVE-2022-32645 affects vow and describes a race condition that could lead to local information disclosure with SYSTEM privileges required. Exploitation does not require user interaction. The CVE entry cites a patch ID ALPS07494477 (issue ALPS07494477) as the remediation. Multiple connected source...

CVE-2022-32647

In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554646; Issue ID: ALPS07554646...

CVE-2022-32649

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225840; Issue ID: ALPS07225840...

PT-2023-13103 · Jpeg · Jpeg

Name of the Vulnerable Software and Affected Versions: jpeg affected versions not specified Description: The issue is related to a logic error that leads to a possible use after free in jpeg. This could result in local escalation of privilege, with System execution privileges required for...

CVE-2022-32644

CVE-2022-32644 concerns a race-condition-induced use-after-free in vow, leading to local escalation of privilege with System privileges required. Public documentation consistently describes the vulnerability as local, with no user interaction needed for exploitation. The primary impact is the pot...

CVE-2022-32657

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042...

CVE-2022-32638

CVE-2022-32638 describes a race-condition in the ISP component allowing an out-of-bounds write that can lead to local privilege escalation with SYSTEM privileges; exploitation reportedly requires no user interaction. A patch is referenced (ALPS07494449/ALPS07494449). Some connected sources attrib...

ASB-A-257846591

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-42514

In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-42530

In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-42521

In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-42520

In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...