Mediatek, Inc.
Page 5 of 10 — Mediatek, Inc. CVEs from a corpus of 998, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20019 | Medium | 5.9 | 2024-03-04 | In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privil… |
CVE-2024-20018 | Critical | 9.8 | 2024-03-04 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional e… |
CVE-2024-20017 | Critical | 9.8 | 2024-03-04 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional executio… |
CVE-2024-20005 | High | 8.2 | 2024-03-04 | In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20016 | Medium | 4.4 | 2024-02-05 | In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System execution privileges needed… |
CVE-2024-20015 | High | 7.8 | 2024-02-05 | In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional exec… |
CVE-2024-20013 | Medium | 6.7 | 2024-02-05 | In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2024-20012 | Medium | 6.7 | 2024-02-05 | In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20011 | Critical | 9.8 | 2024-02-05 | In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execu… |
CVE-2024-20010 | Medium | 6.7 | 2024-02-05 | In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20009 | High | 8.8 | 2024-02-05 | In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no addition… |
CVE-2024-20007 | High | 7.5 | 2024-02-05 | In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution… |
CVE-2024-20006 | Medium | 6.7 | 2024-02-05 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20004 | High | 7.5 | 2024-02-05 | In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Conn… |
CVE-2024-20003 | High | 7.5 | 2024-02-05 | In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Conn… |
CVE-2024-20002 | Medium | 6.7 | 2024-02-05 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20001 | Medium | 6.7 | 2024-02-05 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-32891 | Medium | 6.7 | 2024-01-02 | In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System ex… |
CVE-2023-32890 | High | 7.5 | 2024-01-02 | In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privi… |
CVE-2023-32889 | High | 7.5 | 2024-01-02 | In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional exe… |
CVE-2023-32888 | High | 7.5 | 2024-01-02 | In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional exe… |
CVE-2023-32887 | High | 7.5 | 2024-01-02 | In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution pr… |
CVE-2023-32886 | High | 7.5 | 2024-01-02 | In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional exec… |
CVE-2023-32885 | Medium | 6.7 | 2024-01-02 | In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32884 | Medium | 6.7 | 2024-01-02 | In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System executi… |
CVE-2023-32883 | Medium | 6.7 | 2024-01-02 | In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2023-32882 | Medium | 6.7 | 2024-01-02 | In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-32881 | Medium | 4.4 | 2024-01-02 | In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privil… |
CVE-2023-32880 | Medium | 4.4 | 2024-01-02 | In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-32879 | Medium | 6.7 | 2024-01-02 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-32878 | Medium | 4.4 | 2024-01-02 | In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-32877 | Medium | 6.7 | 2024-01-02 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-32876 | Medium | 4.4 | 2024-01-02 | In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-32875 | Medium | 4.4 | 2024-01-02 | In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-32874 | Critical | 9.8 | 2024-01-02 | In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional executio… |
CVE-2023-32872 | Medium | 6.7 | 2024-01-02 | In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32831 | Medium | 5.5 | 2024-01-02 | In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution pri… |
CVE-2023-32870 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32869 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32868 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32867 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32866 | Medium | 6.7 | 2023-12-04 | In mmp, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-32865 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2023-32864 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2023-32863 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32862 | Medium | 6.7 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32861 | Medium | 6.7 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32860 | Medium | 6.7 | 2023-12-04 | In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32859 | Medium | 6.7 | 2023-12-04 | In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-32858 | Medium | 4.4 | 2023-12-04 | In GZ, there is a possible information disclosure due to a missing data erasing. This could lead to local information disclosure with System execution privileg… |
CVE-2023-32857 | Medium | 4.4 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution priv… |
CVE-2023-32856 | Medium | 4.4 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution priv… |
CVE-2023-32855 | Medium | 6.7 | 2023-12-04 | In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32854 | Medium | 6.7 | 2023-12-04 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32853 | Medium | 6.7 | 2023-12-04 | In rpmb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-32852 | Medium | 4.4 | 2023-12-04 | In cameraisp, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System executio… |
CVE-2023-32851 | High | 7.8 | 2023-12-04 | In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional executio… |
CVE-2023-32850 | High | 7.8 | 2023-12-04 | In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution p… |
CVE-2023-32849 | Medium | 6.7 | 2023-12-04 | In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32848 | Medium | 6.7 | 2023-12-04 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32847 | High | 7.8 | 2023-12-04 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution… |
CVE-2023-32846 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32845 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32844 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32843 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32842 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32841 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32840 | Medium | 6.5 | 2023-11-06 | In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32839 | Medium | 6.7 | 2023-11-06 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32838 | Medium | 6.7 | 2023-11-06 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32837 | High | 7.8 | 2023-11-06 | In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution… |
CVE-2023-32836 | Medium | 6.7 | 2023-11-06 | In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-32835 | Medium | 6.7 | 2023-11-06 | In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32834 | Medium | 6.7 | 2023-11-06 | In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32832 | High | 7.0 | 2023-11-06 | In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2023-32825 | Medium | 5.5 | 2023-11-06 | In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additi… |
CVE-2023-32818 | Medium | 6.7 | 2023-11-06 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20702 | High | 7.5 | 2023-11-06 | In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte… |
CVE-2023-32830 | Medium | 6.7 | 2023-10-02 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-32829 | Medium | 6.7 | 2023-10-02 | In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32828 | Medium | 6.7 | 2023-10-02 | In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32827 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32826 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32824 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-32823 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32822 | Medium | 6.7 | 2023-10-02 | In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32821 | Medium | 6.7 | 2023-10-02 | In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32820 | High | 7.5 | 2023-10-02 | In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional executi… |
CVE-2023-32819 | Medium | 4.4 | 2023-10-02 | In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-20819 | Critical | 9.8 | 2023-10-02 | In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no addition… |
CVE-2023-32817 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32816 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32815 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32814 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32813 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System executio… |
CVE-2023-32812 | Medium | 6.7 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System executi… |
CVE-2023-32811 | Medium | 6.7 | 2023-09-04 | In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with… |
CVE-2023-32810 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution p… |
CVE-2023-32809 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak… |
CVE-2023-32808 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak… |