CVE-2023-32873

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08583919; Issue ID: ALPS08304227...

CVE-2024-20060

In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541754...

CVE-2024-20058

In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204...

CVE-2024-20021

A logic error in the atf spm module of ARM Trusted Firmware (ATF) allows an attacker to remap physical memory to virtual memory. This vulnerability could lead to a local escalation of privilege , requiring System execution privileges for exploitation. User interaction is not required. While the i...

CVE-2024-20021

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249...

CVE-2024-20060

A security vulnerability exists in MediaTek chips within the da module due to an incorrect status check . This flaw allows for a local escalation of privilege requiring System execution privileges, where user interaction is not required. While specific affected versions are not provided, a patch ...

CVE-2024-20060

In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541754...

CVE-2024-20059

A security vulnerability exists in the da module of MediaTek chips due to an incorrect status check . This flaw could allow for a local escalation of privilege , requiring System execution privileges to exploit. Exploitation does not require user interaction. While a patch ID (ALPS08541749 ) and ...

CVE-2024-20058

In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204...

CVE-2024-20058

MediaTek chips are affected by an out-of-bounds read vulnerability in the keyInstall module caused by a missing bounds check. This flaw could lead to local information disclosure and requires System execution privileges to exploit, with no user interaction required. Remediation is addressed under...

CVE-2024-20058

In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204...

CVE-2023-32873

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08583919; Issue ID: ALPS08304227...

CVE-2024-20057

A missing bounds check in the keyInstall module of MediaTek chips can lead to an out-of-bounds write . This vulnerability allows for local escalation of privilege and requires System execution privileges to exploit. No user interaction is required. The issue is addressed in the 2024-05-05 securit...

CVE-2024-20056

A vulnerability in the preloader component of MediaTek hardware allows for a local elevation of privilege due to an insecure default value. Successful exploitation can lead to the execution of code with System privileges and does not require user interaction. This issue was addressed in the 2024-...

CVE-2024-20056

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528185; Issue ID: ALPS08528185...

CVE-2024-20058: Out-of-bounds Read

In keyInstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580204; Issue ID: ALPS08580204...

CVE-2024-20021: Improper Privilege Management

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249...

CVE-2024-20059: Improper Handling of Faults that Lead to Instruction Skips

In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541749...

CVE-2024-20056: Improper Input Validation

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528185; Issue ID: ALPS08528185...

PT-2024-18545

Name of the Vulnerable Software and Affected Versions In da affected versions not specified Description The issue is related to a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User...