Out-of-bounds

In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032678; Issue ID: ALPS07032678...

Integer overflow

In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558777; Issue ID: ALPS06558777...

Out-of-bounds

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032590; Issue ID: ALPS07032590...

CVE-2022-26470

In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07116037; Issue ID: ALPS07116037...

CVE-2022-26470

The CVE-2022-26470 issue affects the aie module in MediaTek chips. It is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation to System level with no user interaction required. A patch is identified as ALPS07116037 (Issue ALPS07116037).

CVE-2022-26466

In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558777; Issue ID: ALPS06558777...

CVE-2022-26463

The CVE-2022-26463 issue affects vow (MediaTek vow) and involves an out-of-bounds read caused by an incorrect bounds check. The vulnerability could lead to local information disclosure with System execution privileges required, and no user interaction is needed to exploit. Public references in th...

CVE-2022-26464

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032699; Issue ID: ALPS07032699...

CVE-2022-26463

In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032686; Issue ID: ALPS07032686...

CVE-2022-26465

In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558799; Issue ID: ALPS06558799...

CVE-2022-26462

In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032660; Issue ID: ALPS07032660...

CVE-2022-26464

CVE-2022-26464 is a vulnerability described in IBM Datacap-related advisories as an out-of-bounds write in vow that can lead to local privilege elevation. The IBM bulletin lists affected products/versions as Datacap Navigator 9.1.7, 9.1.8, and 9.1.9, with a remediation recommendation to upgrade t...

CVE-2022-26458

CVE-2022-26458 affects MediaTek vow. Root cause: a missing bounds check causing an out-of-bounds write, enabling local privilege escalation to SYSTEM with no user interaction. The patch reference ALPS07032678 is noted, but no affected versions or exploitation details are provided in the supplied ...

CVE-2022-26461

In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032604; Issue ID: ALPS07032604...

CVE-2022-26460

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032590; Issue ID: ALPS07032590...

CVE-2022-26459

In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032634; Issue ID: ALPS07032634...

CVE-2022-26459

The CVE-2022-26459 issue affects MediaTek vow. An integer overflow can cause an out-of-bounds read, leading to local information disclosure with System execution privileges required. No user interaction is needed. A patch is referenced as ALPS07032634 (Issue ALPS07032634). Exploitation details ar...

CVE-2022-26455

The CVE-2022-26455 entry concerns the gz module on MediaTek devices. A memory corruption fault arises from incorrect error handling, enabling local escalation of privilege with SYSTEM privileges required; no user interaction is needed. A patch is referenced (ALPS07177858 / ALPS07177858). Connecte...

CVE-2022-26456

In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545473; Issue ID: ALPS06545473...

CVE-2022-26451

In ged, a use-after-free due to improper locking is described, enabling local escalation to SYSTEM privileges with no user interaction required. Patch ID ALPS07202966 (Issue ALPS07202966) is noted as the remediation; exploitation status is not detailed in the provided documents.