CVE-2024-20117

The CVE-2024-20117 issue affects the vdec component, where an out-of-bounds read caused by improper structure design can lead to local information disclosure with SYSTEM privileges required and no user interaction. Public data confirms the vulnerability details across multiple feeds (NVD/Red Hat/...

CVE-2024-20117

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681...

CVE-2024-20117

In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09008925; Issue ID: MSV-1681...

CVE-2024-20115

In the ccu component, there is a vulnerability caused by a missing bounds check that can lead to an out-of-bounds write. This allows local escalation of privilege to SYSTEM with no user interaction required. A patch is available (Patch ID: ALPS09036695; Issue ID: MSV-1713). No exploitation detail...

CVE-2024-20115

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09036695; Issue ID: MSV-1713...

CVE-2024-20113

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09036814; Issue ID: MSV-1715...

CVE-2024-20113

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09036814; Issue ID: MSV-1715...

CVE-2024-20112

In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730...

CVE-2024-20112

In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09071481; Issue ID: MSV-1730...

CVE-2024-20111

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09065033; Issue ID: MSV-1754...

CVE-2024-20111

CVE-2024-20111 affects the ccu component (as reported in multiple sources) and is caused by a missing bounds check leading to an out-of-bounds write. This can enable local privilege escalation with system execution privileges, and exploitation does not require user interaction. Public references ...

CVE-2024-20110

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09065887; Issue ID: MSV-1762...

CVE-2024-20109

In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09065928; Issue ID: MSV-1763...

CVE-2024-20108

In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09082988; Issue ID: MSV-1774...

CVE-2024-20106

CVE-2024-20106 affects MediaTek’s m4u component. The issue is a missing bounds check causing a possible out-of-bounds write, enabling local privilege escalation with System-level privileges and no user interaction required. A patch is available: ALPS08960505 (MSV-1590). Other connected records co...

PT-2024-18603 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to an out of bounds read in vdec due to improper structure design, which could lead to local information disclosure. System execution privileges are needed for exploitatio...

PT-2024-18611 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible out of bounds read in vdec due to improper structure design, which could lead to local information disclosure. System execution privileges are needed for...

PT-2024-18608 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: KeyInstall affected versions not specified Description: The issue is related to a possible out of bounds write in KeyInstall due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges...

ASB-A-242996380

In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47028

In ffuflashpack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...