CVE-2023-20809

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198...

Out-of-bounds

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198...

CVE-2023-20809

CVE-2023-20809 concerns MediaTek’s vdec component, where a missing bounds check enables an out-of-bounds write. This can lead to local privilege escalation with system privileges, and exploitation does not require user interaction. The advisory notes a patch: DTV03751198 (Issue ID: DTV03751198). ...

CVE-2023-20809

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198...

CVE-2023-20809

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198...

PT-2023-5632 · Mediatek · Mtk Vdec

Name of the Vulnerable Software and Affected Versions: MTK vdec component affected versions not specified Description: The issue is related to a buffer overflow in the memory of the vdec component of the MediaTek microprogram software, which can be exploited to gain elevated privileges. This can...

CVE-2023-20685

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575...

CVE-2023-20684

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue ID: ALPS07671069...

Race condition

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575...

Race condition

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue ID: ALPS07671069...

CVE-2023-20685

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575...

PT-2023-17549 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible use after free due to a race condition in vdec. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

CVE-2023-20684

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue ID: ALPS07671069...

CVE-2023-20684

CVE-2023-20684 affects the vdec component and describes a use-after-free brought on by a race condition, enabling local escalation of privileges to SYSTEM with no user interaction required. The vulnerability is about memory mismanagement that could be exploited locally; exploitation details are n...

CVE-2023-20685

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575...

PT-2023-17550 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible use after free due to a race condition in vdec. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

SUSE CVE-2022-3112

An issue was discovered in the Linux kernel through 5.16-rc6. amvdecsetcanvases in drivers/staging/media/meson/vdec/vdechelpers.c lacks check of the return value of kzalloc and will cause the null pointer dereference...

The vulnerability of the amvdec_set_canvases() function in the Linux kernel’s drivers/staging/media/meson/vdec/vdec_helpers.c file allows a hacker to cause a service failure or gain increased privileges.

The vulnerability of the amvdecsetcanvases function in the drivers/staging/media/meson/vdec/vdechelpers.c file of the Linux kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause service failures or gain increased privileges...

DEBIAN-CVE-2022-3112

An issue was discovered in the Linux kernel through 5.16-rc6. amvdecsetcanvases in drivers/staging/media/meson/vdec/vdechelpers.c lacks check of the return value of kzalloc and will cause the null pointer dereference...

GSD-2022-1008089 media: meson: vdec: fix possible refcount leak in vdec_probe()

media: meson: vdec: fix possible refcount leak in vdecprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...