PT-2022-6414

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.3 Description The issue is related to the misinterpretation of the regulator get return value in the Linux kernel, specifically in the drivers/scsi/ufs/ufs-mediatek.c file. This misinterpretation can lead to...

PT-2021-27285

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.15.11 Description A potential security issue exists due to a lack of NULL pointer check for mtk hdmi conf in the HDMI driver. The actual impact and attack plausibility have not yet been proven...

GSD-2021-1002758 usb: xhci-mtk: fix list_del warning when enable list debug

usb: xhci-mtk: fix listdel warning when enable list debug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

PT-2021-7533

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16-rc6 Description An issue in the Linux kernel is related to the function mtk vcodec fw vpu init in the module drivers/media/platform/mtk-vcodec/mtk vcodec fw vpu.c, which lacks a check of the return value of...

ASB-A-187527909

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

UVI-2021-1001074 phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()

phy: phy-mtk-tphy: Fix some resource leaks in mtkphyinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

PT-2021-29539

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description The issue is related to resource leaks in the mtk phy init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25463

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue is related to resource leaks in the mtk phy init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-25545

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: The issue is related to resource leaks in the mtk phy init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-29457

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue is related to resource leaks in the mtk phy init function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

CVE-2020-11836

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...

Design/Logic Flaw

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...

CVE-2020-11836

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...

CVE-2020-11836

Technical details about CVE-2020-11836 are not provided in the supplied documents; no specifics on affected components, root cause, or fixes are publicly available. Monitor for updates.

PT-2021-9425

Name of the Vulnerable Software and Affected Versions OPPO Android Phone with MTK chipset and Android versions 8.1 through 11 Description The issue is related to an information leak vulnerability. The commands adb shell getprop ro.vendor.aee.enforcing return no, indicating a potential security...

CVE-2020-11836: Undefined Security Weakness

OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no...

CVE-2021-3022

An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK protect2 partition. The LG ID is LVE-SMP-200028 January 2021...

CVE-2021-3022

An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK protect2 partition. The LG ID is LVE-SMP-200028 January 2021...

Code injection

An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK protect2 partition. The LG ID is LVE-SMP-200028 January 2021...

CVE-2021-3022

An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK protect2 partition. The LG ID is LVE-SMP-200028 January 2021...