Mediatek, Inc.
Page 11 of 11 — Mediatek, Inc. CVEs from a corpus of 1016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-20027 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-20026 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-20025 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-20024 | High | 7.8 | 2022-02-09 | In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional… |
CVE-2022-20017 | Medium | 5.5 | 2022-02-09 | In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional… |
CVE-2022-20023 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of… |
CVE-2022-20022 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from a host with the same BD address as the… |
CVE-2022-20021 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lea… |
CVE-2022-20020 | Medium | 5.5 | 2022-01-04 | In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional e… |
CVE-2022-20019 | Medium | 5.5 | 2022-01-04 | In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additi… |
CVE-2022-20018 | Medium | 4.4 | 2022-01-04 | In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution p… |
CVE-2022-20016 | Medium | 6.7 | 2022-01-04 | In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-20015 | Medium | 4.4 | 2022-01-04 | In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execu… |
CVE-2022-20014 | Medium | 6.7 | 2022-01-04 | In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution p… |
CVE-2022-20013 | Medium | 6.4 | 2022-01-04 | In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-20012 | High | 7.8 | 2022-01-04 | In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution… |