MDP Package Buffer Overflow Privilege Escalation

The vulnerability of the MDP package for the operating system of industrial personal computers TwinCAT/BSD relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges, execute arbitrary code, or cause service failure...

ai-economist (>=1.2.3, <=1.7.1), aries-cloudcontroller (>=0.2.4, <=0.3.1) +2 more potentially affected by CVE-2024-21503 via black (21.5.0b1)

black PYPI version 21.5.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - ai-economist =1.2.3, =0.2.4, =0.1.0, =2.1.2 - motherstarter 2021.5.11 Source cves: CVE-2024-21503 Source advisory: OSV:GHSA-FJ7X-Q9J7-G6Q6...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2023-39968 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2023-39968 Source advisory: OSV:GHSA-R726-VMFQ-J9J3...

appyter (>=0.18.3, <=0.18.11), metro-sp-mdp (>=0.1.0, <=2.1.2) +1 more potentially affected by CVE-2023-39968 via jupyter-server (1.13.5)

jupyter-server PYPI version 1.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - appyter =0.18.3, =0.1.0, =0.18.0, =0.37.0 Source cves: CVE-2023-39968 Source advisory: OSV:PYSEC-2023-155...

CVE-2022-32623

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342114; Issue ID: ALPS07342114...

CVE-2022-32623

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342114; Issue ID: ALPS07342114...

CVE-2022-32623

CVE-2022-32623 concerns the mdp component, with an out-of-bounds write caused by incorrect error handling. The issue can enable local escalation of privilege with system execution privileges required, and does not require user interaction to exploit. The patch reference provided is ALPS07342114 (...

PT-2023-13088 · Mdp · Mdp

Name of the Vulnerable Software and Affected Versions: mdp affected versions not specified Description: The issue is related to incorrect error handling, which can cause an out of bounds write. This could potentially lead to local escalation of privilege. System execution privileges are required...

CVE-2022-32623: Out-of-bounds Write

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342114; Issue ID: ALPS07342114...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

Race condition

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21776

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-21776

The CVE-2022-21776 issue is a race-condition triggered use-after-free in MediaTek’s MDP component leading to local privilege escalation with SYSTEM rights, no user interaction required. Multiple sources (NVD entry, Red Hat advisory, CNVD/CNNVD summaries) corroborate the same root cause and impact...

PT-2022-15117

Name of the Vulnerable Software and Affected Versions MDP affected versions not specified Description The issue is related to a possible use after free due to a race condition in MDP. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not...

CVE-2022-21776: Concurrent Execution using Shared Resource with Improper Synchronization

In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450...

CVE-2022-20067

In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836585; Issue ID: ALPS05836585...

CVE-2022-20067

In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836585; Issue ID: ALPS05836585...

CVE-2022-20052

In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS05836642; Issue ID: ALPS05836642...