Lucene search
+L

223 matches found

Positive Technologies
Positive Technologies
•added 2023/05/24 12:00 a.m.•2 views

PT-2025-38444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue was resolved in the Linux kernel’s media subsystem, specifically within the MediaTek VPU driver. The issue occurs when pdev is NULL and is still...

5.5CVSS0.00149EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 3:31 a.m.•14 views

SUSE CVE-2022-3113

An issue was discovered in the Linux kernel through 5.16-rc6. mtkvcodecfwvpuinit in drivers/media/platform/mtk-vcodec/mtkvcodecfwvpu.c lacks check of the return value of devmkzalloc and will cause the null pointer dereference...

5.5CVSS7.9AI score0.00675EPSS
SaveExploits2References10
BDU FSTEC
BDU FSTEC
•added 2022/12/22 12:00 a.m.•27 views

The vulnerability of the mtk_vcodec_fw_vpu_init() function in the Linux kernel’s drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c file allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the mtkvcodecfwvpuinit function in the Linux kernel’s drivers/media/platform/mtk-vcodec/mtkvcodecfwvpu.c file is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause system failures or gain increased privileges...

5.5CVSS6.7AI score0.00675EPSS
SaveExploits2References10Affected Software3
OSV
OSV
•added 2022/12/14 9:15 p.m.•8 views

DEBIAN-CVE-2022-3113

An issue was discovered in the Linux kernel through 5.16-rc6. mtkvcodecfwvpuinit in drivers/media/platform/mtk-vcodec/mtkvcodecfwvpu.c lacks check of the return value of devmkzalloc and will cause the null pointer dereference...

5.5CVSS6.6AI score0.00675EPSS
SaveExploits2References1
OSV
OSV
•added 2022/12/14 9:15 p.m.•11 views

AZL-11613 CVE-2022-3113 affecting package kernel for versions less than 5.15.86.1-1

An issue was discovered in the Linux kernel through 5.16-rc6. mtkvcodecfwvpuinit in drivers/media/platform/mtk-vcodec/mtkvcodecfwvpu.c lacks check of the return value of devmkzalloc and will cause the null pointer dereference...

5.5CVSS6.8AI score0.00675EPSS
SaveExploits2References1
OSV
OSV
•added 2022/11/08 9:15 p.m.•16 views

CVE-2022-21778

In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421...

6.7CVSS5.9AI score0.00139EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/08 9:15 p.m.•29 views

CVE-2022-21778

In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421...

6.7CVSS0.00139EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/11/08 12:00 a.m.•15 views

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek vpu that stems from incorrect boundary checking, leading to information disclosure...

6.7CVSS6.6AI score0.00139EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/08 12:00 a.m.•40 views

CVE-2022-21778

In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421...

6.6AI score0.00139EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/08 12:00 a.m.•5 views

CVE-2022-21778: Out-of-bounds Read

In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421...

6.7CVSS5.8AI score0.00139EPSS
SaveExploits0References3
CVE
CVE
•added 2022/11/08 12:00 a.m.•77 views

CVE-2022-21778

The CVE-2022-21778 issue affects MediaTek’s vpu, where an incorrect bounds check can trigger information disclosure and potentially local privilege escalation. The vulnerability requires local access (attack vector: LOCAL), with no user interaction, and a high privileges requirement for exploitat...

6.7CVSS6.3AI score0.00139EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/09/17 12:00 a.m.•11 views

PT-2022-34044 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/09/17 12:00 a.m.•1 views

PT-2022-34370

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/09/17 12:00 a.m.•1 views

PT-2022-34477

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/09/17 12:00 a.m.•1 views

PT-2022-34231

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.211 Description The issue is related to refcount bugs in the meson vpu has available connectors function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.8AI score
SaveExploits0References1
NVD
NVD
•added 2022/03/10 5:45 p.m.•23 views

CVE-2022-20049

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

6.7CVSS0.00115EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/03/09 5:02 p.m.•36 views

CVE-2022-20049

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

6.9AI score0.00115EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/09 5:02 p.m.•106 views

CVE-2022-20049

CVE-2022-20049 affects the vpu component and describes a missing permission check that can enable local privilege escalation with System execution privileges required. Exploitation does not require user interaction. A patch is referenced (ALPS05954679; ALPS05954679). Connected sources confirm thi...

6.7CVSS6.6AI score0.00115EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/09 12:00 a.m.•17 views

PT-2022-14296 · Vpu · Vpu

Name of the Vulnerable Software and Affected Versions: vpu affected versions not specified Description: The issue is related to a missing permission check in vpu, which could lead to a local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is...

6.7CVSS6.5AI score0.00115EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/09 12:00 a.m.•8 views

CVE-2022-20049: Missing Authorization

In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679...

6.7CVSS6.8AI score0.00115EPSS
SaveExploits0References2
Rows per page
Query Builder