PT-2022-17850 · Unknown · Wifi Driver

Name of the Vulnerable Software and Affected Versions: Wifi driver affected versions not specified Description: The issue is related to a missing bounds check in the wifi driver, which could lead to a possible out of bounds write. This could result in local escalation of privilege, requiring Syst...

PT-2022-17837 · Cta · Cta

Name of the Vulnerable Software and Affected Versions: cta affected versions not specified Description: The issue is related to a missing permission check, allowing for the writing of permission usage records of an app. This could lead to local escalation of privilege without requiring additional...

PT-2022-17835 · Mediatek +1 · Mt6833 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the camera ISP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking that could allow out-of-bounds writes. This could result in a local privilege escalation that requires syste...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking that could allow out-of-bounds writes. This could result in a local privilege escalation that requires syste...

PUB-A-222408847

In AllocateInternalBuffers of g3aabufferallocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek chips that originates from uninitialized data that could be written out-of-bounds. This could result in remote elevation of privilege without additional execute...

PT-2022-17836 · Unknown · Video Codec

Name of the Vulnerable Software and Affected Versions: Video codec affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition in the video codec. This could lead to local escalation of privilege, with System execution privileges neede...

ASB-A-236848817

In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-222339795

In TBD of keymasteripc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-226446030

In SAEMMRetrievEPLMNList of SAEMMContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure post-authentication with no additional execution privileges needed. User interaction is not needed for exploitation...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from type confusion and may result in out-of-bounds writes. This could result in a local privilege escalation that requires system execution privileges...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from type confusion and may result in out-of-bounds writes. This could result in a local privilege escalation that requires system execution privileges...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek chips that stems from type confusion and may result in out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

PT-2022-17846 · Unknown · Httpclient

Name of the Vulnerable Software and Affected Versions: httpclient affected versions not specified Description: The issue is related to an out of bounds write due to uninitialized data in httpclient. This could lead to remote escalation of privilege with no additional execution privileges needed...

ASB-A-231271467

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-233075473

In u32destroykey and related functions of clsu32.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-205573273

In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-215003903

In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

ASB-A-236848165

In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...