Lucene search

K

Mt8788 Firmware Security Vulnerabilities

cve
cve

CVE-2023-20741

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628591; Issue ID: ALPS07628606.

4.4CVSS

4.2AI Score

0.0004EPSS

2023-06-06 01:15 PM
19
cve
cve

CVE-2023-20742

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628591; Issue ID: ALPS07628540.

4.4CVSS

4.2AI Score

0.0004EPSS

2023-06-06 01:15 PM
21
cve
cve

CVE-2023-20746

In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519142; Issue ID: ALPS07519217.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-06-06 01:15 PM
29
cve
cve

CVE-2023-20749

In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780926; Issue ID: ALPS07780926.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-06-06 01:15 PM
17
cve
cve

CVE-2023-20750

In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780926; Issue ID: ALPS07780928.

4.1CVSS

4.1AI Score

0.0004EPSS

2023-06-06 01:15 PM
18
cve
cve

CVE-2023-20753

In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07588667.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-07-04 02:15 AM
19
cve
cve

CVE-2023-20754

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-07-04 02:15 AM
19
cve
cve

CVE-2023-20755

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07509605.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-07-04 02:15 AM
14
cve
cve

CVE-2023-20756

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07549928.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-07-04 02:15 AM
22
cve
cve

CVE-2023-20761

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-07-04 02:15 AM
12
cve
cve

CVE-2023-20766

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-07-04 02:15 AM
15
cve
cve

CVE-2023-20768

In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07559800.

6.7CVSS

6.6AI Score

0.0004EPSS

2023-07-04 02:15 AM
17
cve
cve

CVE-2023-20780

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017756.

4.4CVSS

4.3AI Score

0.0004EPSS

2023-08-07 04:15 AM
34
cve
cve

CVE-2023-20781

In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS07905323.

4.4CVSS

4.8AI Score

0.0004EPSS

2023-08-07 04:15 AM
29
cve
cve

CVE-2023-20782

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550103.

4.4CVSS

4.3AI Score

0.0004EPSS

2023-08-07 04:15 AM
27
cve
cve

CVE-2023-20783

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826905; Issue ID: ALPS07826905.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-08-07 04:15 AM
24
cve
cve

CVE-2023-20784

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826989; Issue ID: ALPS07826989.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-08-07 04:15 AM
19
cve
cve

CVE-2023-20790

In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.

4.4CVSS

4.4AI Score

0.0004EPSS

2023-08-07 04:15 AM
26
cve
cve

CVE-2023-20795

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07864900; Issue ID: ALPS07864900.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-08-07 04:15 AM
21
cve
cve

CVE-2023-20821

In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07937113; Issue ID: ALPS07937113.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-09-04 03:15 AM
27
cve
cve

CVE-2023-20823

In cmdq, there is a possible out of bounds read due to an incorrect status check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08021592; Issue ID: ALPS08021592.

4.4CVSS

4.6AI Score

0.0004EPSS

2023-09-04 03:15 AM
30
cve
cve

CVE-2023-20824

In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07951402; Issue ID: ALPS07951402.

5.5CVSS

5.1AI Score

0.0004EPSS

2023-09-04 03:15 AM
16
cve
cve

CVE-2023-20825

In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: ALPS07951402; Issue ID: ALPS07951413.

5.5CVSS

5.1AI Score

0.0004EPSS

2023-09-04 03:15 AM
22
cve
cve

CVE-2023-20833

In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764.

4.4CVSS

4.3AI Score

0.0004EPSS

2023-09-04 03:15 AM
23
cve
cve

CVE-2023-20836

In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629.

4.4CVSS

4.2AI Score

0.0004EPSS

2023-09-04 03:15 AM
32
cve
cve

CVE-2023-20837

In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07992786; Issue ID: ALPS07992786.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-09-04 03:15 AM
31
cve
cve

CVE-2023-32807

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360.

4.4CVSS

4.3AI Score

0.0004EPSS

2023-09-04 03:15 AM
26
cve
cve

CVE-2023-32810

In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07867212; Issue ID: ALPS07867212.

4.4CVSS

4.4AI Score

0.0004EPSS

2023-09-04 03:15 AM
30
cve
cve

CVE-2023-32822

In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07994229; Issue ID: ALPS07994229.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-10-02 03:15 AM
27
cve
cve

CVE-2023-32823

In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID: ALPS07912966.

6.7CVSS

6.8AI Score

0.0004EPSS

2023-10-02 03:15 AM
39
cve
cve

CVE-2023-32824

In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID: ALPS07912961.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-10-02 03:15 AM
35
cve
cve

CVE-2023-32825

In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07884130; Issue ID: ALPS07884130.

5.5CVSS

5.1AI Score

0.0004EPSS

2023-11-06 04:15 AM
30
cve
cve

CVE-2023-32826

In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993539; Issue ID: ALPS07993544.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-10-02 03:15 AM
35
cve
cve

CVE-2023-32827

In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993539; Issue ID: ALPS07993539.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-10-02 03:15 AM
37
cve
cve

CVE-2023-32834

In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08161762; Issue ID: ALPS08161762.

6.7CVSS

6.8AI Score

0.0004EPSS

2023-11-06 04:15 AM
31
cve
cve

CVE-2023-32835

In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08157918; Issue ID: ALPS08157918.

6.7CVSS

6.8AI Score

0.0004EPSS

2023-11-06 04:15 AM
28
cve
cve

CVE-2023-32847

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08241940; Issue ID: ALPS08241940.

7.8CVSS

7.7AI Score

0.0005EPSS

2023-12-04 04:15 AM
21
cve
cve

CVE-2023-32849

In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08161758; Issue ID: ALPS08161758.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-12-04 04:15 AM
19
cve
cve

CVE-2023-32850

In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016659; Issue ID: ALPS08016659.

7.8CVSS

7.7AI Score

0.0005EPSS

2023-12-04 04:15 AM
18
cve
cve

CVE-2023-32851

In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016652; Issue ID: ALPS08016652.

7.8CVSS

7.7AI Score

0.0005EPSS

2023-12-04 04:15 AM
19
cve
cve

CVE-2023-32854

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08240132; Issue ID: ALPS08240132.

6.7CVSS

6.7AI Score

0.0004EPSS

2023-12-04 04:15 AM
18
cve
cve

CVE-2023-32858

In GZ, there is a possible information disclosure due to a missing data erasing. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07806008; Issue ID: ALPS07806008.

4.4CVSS

4.3AI Score

0.0004EPSS

2023-12-04 04:15 AM
17
cve
cve

CVE-2023-32859

In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08000473; Issue ID: ALPS08000473.

6.7CVSS

6.9AI Score

0.0004EPSS

2023-12-04 04:15 AM
18
cve
cve

CVE-2023-32871

In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514.

7AI Score

0.0004EPSS

2024-05-06 03:15 AM
35
cve
cve

CVE-2023-32872

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08308607.

6.7CVSS

6.7AI Score

0.0004EPSS

2024-01-02 03:15 AM
14
cve
cve

CVE-2023-32873

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08583919; Issue ID: ALPS08304227.

7AI Score

0.0004EPSS

2024-05-06 03:15 AM
33
cve
cve

CVE-2023-32875

In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308607; Issue ID: ALPS08304217.

4.4CVSS

4.3AI Score

0.0004EPSS

2024-01-02 03:15 AM
31
cve
cve

CVE-2023-32876

In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308612; Issue ID: ALPS08308612.

4.4CVSS

4.3AI Score

0.0004EPSS

2024-01-02 03:15 AM
20
cve
cve

CVE-2023-32877

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308070.

6.7CVSS

6.7AI Score

0.0004EPSS

2024-01-02 03:15 AM
35
cve
cve

CVE-2023-32878

In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08307992.

4.4CVSS

4.3AI Score

0.0004EPSS

2024-01-02 03:15 AM
22
Total number of security vulnerabilities286