Lucene search
K

322 matches found

CVE
CVE
added 2023/08/07 3:21 a.m.40 views

CVE-2023-20784

CVE-2023-20784 describes an out-of-bounds write in the keyinstall component due to a missing bounds check, enabling local escalation of privilege with SYSTEM execution privileges required and no user interaction. The vulnerability is associated with MediaTek-based chip environments as per multipl...

6.7CVSS6.7AI score0.00087EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/07 3:21 a.m.6 views

CVE-2023-20783

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826905; Issue ID: ALPS07826905...

7.2AI score0.00087EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/07 3:21 a.m.17 views

CVE-2023-20783

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826905; Issue ID: ALPS07826905...

7AI score0.00087EPSS
Exploits0References1
CVE
CVE
added 2023/08/07 3:21 a.m.45 views

CVE-2023-20783

CVE-2023-20783 describes an out-of-bounds write in the keyinstall component due to a missing bounds check, enabling local privilege escalation with System-level privileges; exploitation is reported as possible without user interaction. The available references consistently cite this issue and a p...

6.7CVSS6.7AI score0.00087EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/07 3:21 a.m.12 views

CVE-2023-20782

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550103...

6.2AI score0.00086EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/07 3:21 a.m.15 views

CVE-2023-20782

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550103...

4.7AI score0.00086EPSS
Exploits0References1
CVE
CVE
added 2023/08/07 3:21 a.m.48 views

CVE-2023-20782

MediaTek’s keyinstall component in the MediaTek microprogram software is affected by CVE-2023-20782, caused by a missing bounds check that can lead to local information disclosure with System privileges (no user interaction). A patch is noted as ALPS07550104 (Issue ALPS07550103). Connected adviso...

4.4CVSS4.3AI score0.00086EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/07 3:21 a.m.11 views

CVE-2023-20781

In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS07905323...

6.8AI score0.00084EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/07 3:21 a.m.14 views

CVE-2023-20781

In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS07905323...

5.1AI score0.00084EPSS
Exploits0References1
CVE
CVE
added 2023/08/07 3:21 a.m.49 views

CVE-2023-20781

In keyinstall, a memory corruption vulnerability is caused by a missing bounds check, enabling local denial of service with SYSTEM privileges without user interaction. Affects the keyinstall component; exploitation details are not provided beyond the local-privilege context. The issue is associat...

4.4CVSS4.8AI score0.00084EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/07 3:21 a.m.13 views

CVE-2023-20780

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017756...

6.2AI score0.00104EPSS
Exploits0References1
CVE
CVE
added 2023/08/07 3:21 a.m.118 views

CVE-2023-20780

The CVE-2023-20780 entry concerns MediaTek/MVK keyinstall: a missing bounds check in the keyinstall module can cause local information disclosure, requiring System privileges with no user interaction. Affected component is the keyinstall path; impact is local information disclosure with potential...

4.4CVSS4.3AI score0.00104EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/07 3:21 a.m.20 views

CVE-2023-20780

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017756...

4.7AI score0.00104EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.1 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the keyinstall module, which could lead to information disclosure...

4.4CVSS6.5AI score0.00104EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.3 views

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a missing boundary check in the keyinstall module, which may result in memory corruption...

4.4CVSS6.7AI score0.00084EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.2 views

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the keyinstall module, which may result in out-of-bounds writes...

6.7CVSS6.8AI score0.00087EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/07 12:0 a.m.4 views

PT-2023-4284 · Mediatek · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall component of MediaTek microprogram software affected versions not specified Description: The issue is related to insufficient input validation in the keyinstall component, which can lead to information disclosure. Exploitation of...

4.4CVSS4.2AI score0.00086EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.3 views

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the keyinstall module, which may result in out-of-bounds writes...

6.7CVSS6.8AI score0.00087EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.3 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the keyinstall module, which could lead to information disclosure...

4.4CVSS6.5AI score0.00086EPSS
Exploits0References2
OSV
OSV
added 2023/07/04 2:15 a.m.1 views

CVE-2023-20754

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343...

6.7CVSS6AI score0.00101EPSS
Exploits0References1
Rows per page
Query Builder