5797 matches found
CVE-2023-20602: Integer Overflow or Wraparound
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494107; Issue ID: ALPS07494107...
CVE-2023-20610
CVE-2023-20610 describes a memory corruption risk in the MediaTek display DRM stack caused by a race condition, enabling local escalation of privilege with System execution privileges required and no user interaction. The vulnerability affects the display DRM component; the root cause is a race c...
CVE-2023-20615
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572...
PT-2023-17476
Name of the Vulnerable Software and Affected Versions keyinstall affected versions not specified Description The issue is related to a possible out of bounds read in keyinstall due to a missing bounds check. This could lead to local information disclosure, with System execution privileges require...
CVE-2023-20607
In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07512839; Issue ID: ALPS07512839...
CVE-2023-20610: Improper Synchronization
In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363469; Issue ID: ALPS07363469...
CVE-2022-32595: Out-of-bounds Read
In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236...
CVE-2022-32595
In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236...
PT-2023-13085
Name of the Vulnerable Software and Affected Versions Widevine affected versions not specified Description The issue is related to an incorrect bounds check, leading to a possible out of bounds read. This could result in local information disclosure, requiring System execution privileges for...
CVE-2023-20608: Use After Free
In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363599; Issue ID: ALPS07363599...
CVE-2023-20602
CVE-2023-20602 affects the MediaTek ged component in MediaTek devices. The issue is a vulnerability in ged caused by an integer overflow leading to an out-of-bounds write. This can enable local escalation of privilege with System execution privileges required; no user interaction is needed for ex...
PT-2023-17479
Name of the Vulnerable Software and Affected Versions display drm affected versions not specified Description The issue is related to a possible use after free due to a race condition in display drm. This could lead to local escalation of privilege with System execution privileges needed. User...
PT-2023-17483
Name of the Vulnerable Software and Affected Versions ril affected versions not specified Description The issue is related to a possible out of bounds write due to a missing bounds check in ril. This could lead to local escalation of privilege with System execution privileges needed. User...
CVE-2022-32643: Improper Synchronization
In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07341261...
CVE-2023-20612: Improper Input Validation
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629571; Issue ID: ALPS07629571...
CVE-2023-20613
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628614; Issue ID: ALPS07628614...
CVE-2022-32656: Undefined Security Weakness
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035...
CVE-2022-32654: Undefined Security Weakness
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011...
CVE-2023-20613: Improper Input Validation
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628614; Issue ID: ALPS07628614...
PT-2023-17475
Name of the Vulnerable Software and Affected Versions ged affected versions not specified Description The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User interaction i...