39 matches found
CVE-2022-32652
In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262617; Issue ID: ALPS07262617...
CVE-2022-32651
In mtk-aie, there is a use-after-free caused by a logic error that can lead to local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. Patch ID ALPS07225857 (Issue ID ALPS07225857) is noted as the fix in the CVE record. Multiple con...
CVE-2022-32651
In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225857; Issue ID: ALPS07225857...
CVE-2022-32652
In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262617; Issue ID: ALPS07262617...
CVE-2022-32653
The CVE-2022-32653 issue affects MediaTek’s mtk-aie, described as a use-after-free caused by a logic error that could allow local escalation of privilege with system execution privileges needed, no user interaction required. Multiple connected sources (Red Hat, CVE listings, PRION, CNNVD, PT-Secu...
CVE-2022-32651
In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225857; Issue ID: ALPS07225857...
PT-2023-13107 · Mediatek · Mtk-Aie
Name of the Vulnerable Software and Affected Versions: mtk-aie affected versions not specified Description: The issue is related to a logic error that leads to a possible use after free, which could result in local escalation of privilege. System execution privileges are needed for exploitation,...
CVE-2022-32653
In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262518; Issue ID: ALPS07262518...
CVE-2022-39069
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...
CVE-2022-39069
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...
Sql injection
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...
PT-2022-24710 · Zte · Zaip-Aie
Name of the Vulnerable Software and Affected Versions: ZTE ZAIP-AIE affected versions not specified Description: The issue is related to a SQL injection vulnerability. Due to the lack of input verification by the server, an attacker could trigger an attack by building malicious requests. This cou...
ZTE ZAIP-AIE SQL注入漏洞
ZTE ZAIP-AIE is a product of China's ZTE Corporation ZTE. The ZTE ZAIP-AIE suffers from a security vulnerability that stems from a lack of input validation on the server and a SQL injection vulnerability that allows an attacker to trigger an attack by constructing a malicious request, which in tu...
CVE-2022-39069
ZTE ZAIP-AIE is affected by CVE-2022-39069, a SQL injection vulnerability caused by insufficient input verification on the server. The issue can allow an attacker to construct malicious requests, potentially leaking content from the current table. The CVE has a medium severity (CVSS v3.1 base sco...
CVE-2022-39069
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...
CVE-2022-39069
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...
CVE-2022-26470
In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07116037; Issue ID: ALPS07116037...
MediaTek 芯片缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the aie module of the MediaTek chips, which is caused by an out-of-range write due to incorrect boundary checking. This could result in a local privilege escalation that requires system...
PT-2022-17883 · Aie · Aie
Name of the Vulnerable Software and Affected Versions: aie affected versions not specified Description: The issue is related to a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interacti...