CVE-2023-20646: Improper Input Validation

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628536; Issue ID: ALPS07628536...

CVE-2023-20651: Improper Input Validation

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629576; Issue ID: ALPS07629576...

CVE-2023-20635

The CVE-2023-20635 issue concerns the keyinstall module (noted across multiple sources) where an integer overflow can lead to information disclosure. Reported impact is local information disclosure with system-level execution privileges required, and exploitation does not require user interaction...

CVE-2023-20632

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628506; Issue ID: ALPS07628506...

CVE-2023-20630

CVE-2023-20630 affects the USB module on MediaTek chips. Root cause: a missing bounds check causing an out-of-bounds write. Impact: local escalation of privilege with System execution privileges required; no user interaction needed. Public exploitation details are not provided in the documents. R...

CVE-2023-20648

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628612; Issue ID: ALPS07628612...

CVE-2023-20650

The CVE-2023-20650 entry describes a vulnerability in MediaTek chips’ apu module: an out-of-bounds write from a missing bounds check, enabling local escalation of privilege to System level. No exploitation details are provided in the documents. CVSSv3.1/3.1 base score 6.7 (MEDIUM); attack vector ...

CVE-2023-20651

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629576; Issue ID: ALPS07629576...

PT-2023-17520 · Apu · Apu

Name of the Vulnerable Software and Affected Versions: apu affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in apu. This could lead to local information disclosure with System execution privileges needed. User...

CVE-2023-20636

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292593; Issue ID: ALPS07292593...

PT-2023-17493

Name of the Vulnerable Software and Affected Versions vow affected versions not specified Description The issue is related to an incorrect bounds check, which could lead to a possible out of bounds write. This might result in local escalation of privilege. System execution privileges are needed f...

CVE-2023-20627

In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629585...

CVE-2023-20637: Improper Input Validation

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628588; Issue ID: ALPS07628588...

CVE-2023-20645

CVE-2023-20645 affects the ril component in MediaTek-based devices. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially enabling local information disclosure with system execution privileges. Exploitation does not require user interaction. A patch is identifie...

CVE-2023-20647

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628547; Issue ID: ALPS07628547...

CVE-2023-20630: Out-of-bounds Write

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628505; Issue ID: ALPS07628505...

CVE-2023-20646

Summary: CVE-2023-20646 affects the MediaTek ril module, with a vulnerability in a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure and, under the conditions stated, system-level execution privileges are implied. No user interaction is require...

CVE-2023-20626: Improper Input Validation

In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405223; Issue ID: ALPS07405223...

CVE-2023-20642: Improper Input Validation

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628586; Issue ID: ALPS07628586...

CVE-2023-20649

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628607; Issue ID: ALPS07628607...