CVE-2023-20649

The CVE-2023-20649 entry concerns the MediaTek ril module. A missing bounds check can cause an out-of-bounds read, enabling local information disclosure with system execution privileges required. Exploitation does not require user interaction, but the vulnerability is confirmed as LOCAL with HIGH...

CVE-2023-20620

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554558; Issue ID: ALPS07554558...

CVE-2023-20635

In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07563028...

CVE-2023-20624

CVE-2023-20624 describes a potential out-of-bounds write in the vow module due to an incorrect bounds check, which could enable local escalation of privilege with System execution privileges needed. User interaction is not required for exploitation. The issue affects MediaTek vow-related componen...

CVE-2023-20644

CVE-2023-20644 affects the ril module of MediaTek-based devices, where a missing bounds check causes an out-of-bounds read. This can lead to local information disclosure with potential system-privilege execution, with no user interaction required. Exploitation details are not provided in the docu...

CVE-2023-20649

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628607; Issue ID: ALPS07628607...

CVE-2023-20639

CVE-2023-20639 affects the ril module in MediaTek chips, where a missing bounds check enables an out-of-bounds write that can lead to local escalation of privilege with System execution privileges required. The vulnerability is exploitable locally with no user interaction, and a patch (ALPS076285...

CVE-2023-20645

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609; Issue ID: ALPS07628609...

PT-2023-17519 · Apu · Apu

Name of the Vulnerable Software and Affected Versions: apu affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in apu. This could lead to local escalation of privilege with System execution privileges needed. User...

CVE-2023-20624

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628530; Issue ID: ALPS07628530...

Google Android Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause local information requiring system execution privileges to be made public...

PT-2023-17493

Name of the Vulnerable Software and Affected Versions vow affected versions not specified Description The issue is related to an incorrect bounds check, which could lead to a possible out of bounds write. This might result in local escalation of privilege. System execution privileges are needed f...

CVE-2023-20628

In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494460; Issue ID: ALPS07494460...

CVE-2023-20648

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628612; Issue ID: ALPS07628612...

CVE-2023-20632

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628506; Issue ID: ALPS07628506...

CVE-2023-20630

CVE-2023-20630 affects the USB module on MediaTek chips. Root cause: a missing bounds check causing an out-of-bounds write. Impact: local escalation of privilege with System execution privileges required; no user interaction needed. Public exploitation details are not provided in the documents. R...

PT-2023-17520 · Apu · Apu

Name of the Vulnerable Software and Affected Versions: apu affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in apu. This could lead to local information disclosure with System execution privileges needed. User...

CVE-2023-20647

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628547; Issue ID: ALPS07628547...

CVE-2023-20648

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628612; Issue ID: ALPS07628612...

CVE-2023-20636

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292593; Issue ID: ALPS07292593...