GSD-2023-1000549 media: mediatek: vcodec: Can't set dst buffer to done when lat decode error

media: mediatek: vcodec: Can't set dst buffer to done when lat decode error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000464 iommu/mediatek: Fix crash on isr after kexec()

iommu/mediatek: Fix crash on isr after kexec This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...

GSD-2023-1000382 ASoC: SOF: mediatek: initialize panic_info to zero

ASoC: SOF: mediatek: initialize panicinfo to zero This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.19 by commit...

GSD-2023-1000264 pinctrl: meditatek: Startup with the IRQs disabled

pinctrl: meditatek: Startup with the IRQs disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.228 by commit...

GSD-2023-1000200 pinctrl: meditatek: Startup with the IRQs disabled

pinctrl: meditatek: Startup with the IRQs disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.160 by commit...

GSD-2023-1000113 pinctrl: meditatek: Startup with the IRQs disabled

pinctrl: meditatek: Startup with the IRQs disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.84 by commit...

GSD-2023-1000008 pinctrl: meditatek: Startup with the IRQs disabled

pinctrl: meditatek: Startup with the IRQs disabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.14 by commit...

PT-2023-33459 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the initialization of panic info to zero in the ASoC: SOF: mediatek component. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2023-34508 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to the ASoC: mediatek: mt8173 component, where IRQ is enabled when pdata is ready. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2023-33541 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to a potential crash on isr after kexec in the iommu/mediatek component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2023-33277 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.160 Description: The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the mediatek driver. It involves starting up with IRQs disabled. The actual impact and potential for...

PT-2023-33341 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.228 Description: The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the mediatek driver. It involves starting up with IRQs disabled. The actual impact and potential for...

PT-2023-33190 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.84 Description: The issue is related to the pinctrl subsystem in the Linux Kernel, specifically with the MediaTek driver. It involves starting up with IRQs disabled. The actual impact and potential for...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which originates from a component affected by MediaTek...

CVE-2022-32653

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262518; Issue ID: ALPS07262518...

CVE-2022-32652

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262617; Issue ID: ALPS07262617...

CVE-2022-32651

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225857; Issue ID: ALPS07225857...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. MediaTek suffers from a buffer error vulnerability that originates from incorrect input validation in meta wifi, which may result in out-of-bounds reads, and can be exploited by an attacker to locally escalate...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek that stems from a lack of boundary checking in gps, where out-of-bounds writes may occur, which may result in local privilege escalation, affecting the following products an...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. MediaTek suffers from a buffer error vulnerability that originates in watchdog, due to lack of boundary checking, out-of-bounds reads may occur, which can be exploited by an attacker to obtain sensitive information,...