Mediatek, Inc.
Page 8 of 10 — Mediatek, Inc. CVEs from a corpus of 998, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20630 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20628 | Medium | 6.7 | 2023-03-07 | In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20627 | Medium | 6.7 | 2023-03-07 | In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-20626 | Medium | 6.7 | 2023-03-07 | In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20625 | Medium | 6.4 | 2023-03-07 | In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. Use… |
CVE-2023-20624 | Medium | 6.7 | 2023-03-07 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20623 | Medium | 6.4 | 2023-03-07 | In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution priv… |
CVE-2023-20621 | Medium | 6.7 | 2023-03-07 | In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20620 | Medium | 4.1 | 2023-03-07 | In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2021-31578 | Critical | 9.8 | 2023-02-06 | In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker… |
CVE-2021-31577 | Critical | 9.8 | 2023-02-06 | In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attack… |
CVE-2021-31576 | High | 7.5 | 2023-02-06 | In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-31575 | Critical | 9.8 | 2023-02-06 | In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal at… |
CVE-2021-31574 | Critical | 9.8 | 2023-02-06 | In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal at… |
CVE-2021-31573 | Critical | 9.8 | 2023-02-06 | In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal at… |
CVE-2023-20619 | Medium | 6.7 | 2023-02-06 | In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20618 | Medium | 6.7 | 2023-02-06 | In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20616 | Medium | 6.7 | 2023-02-06 | In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20615 | Medium | 6.7 | 2023-02-06 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20614 | Medium | 6.7 | 2023-02-06 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20613 | Medium | 6.7 | 2023-02-06 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20612 | Medium | 6.7 | 2023-02-06 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20611 | Medium | 6.4 | 2023-02-06 | In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20610 | Medium | 6.4 | 2023-02-06 | In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20609 | Medium | 4.4 | 2023-02-06 | In ccu, there is a possible out of bounds read due to a logic error. This could lead to local information disclosure with System execution privileges needed. U… |
CVE-2023-20608 | Medium | 6.4 | 2023-02-06 | In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-20607 | Medium | 6.4 | 2023-02-06 | In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20606 | Medium | 4.4 | 2023-02-06 | In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2023-20605 | Medium | 4.4 | 2023-02-06 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2023-20604 | Medium | 6.7 | 2023-02-06 | In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20602 | Medium | 6.7 | 2023-02-06 | In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-32663 | High | 7.5 | 2023-02-06 | In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution pri… |
CVE-2022-32656 | Medium | 6.7 | 2023-02-06 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution… |
CVE-2022-32655 | Medium | 6.7 | 2023-02-06 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution… |
CVE-2022-32654 | Medium | 6.7 | 2023-02-06 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution… |
CVE-2022-32643 | Medium | 6.4 | 2023-02-06 | In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-32642 | Medium | 6.4 | 2023-02-06 | In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32595 | Medium | 4.4 | 2023-02-06 | In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2022-32665 | Critical | 9.8 | 2023-01-03 | In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution… |
CVE-2022-32664 | High | 8.8 | 2023-01-03 | In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User executio… |
CVE-2022-32659 | Medium | 6.7 | 2023-01-03 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution… |
CVE-2022-32658 | Medium | 6.7 | 2023-01-03 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution… |
CVE-2022-32657 | Medium | 6.7 | 2023-01-03 | In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution… |
CVE-2022-32653 | Medium | 6.7 | 2023-01-03 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32652 | Medium | 6.7 | 2023-01-03 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32651 | Medium | 6.7 | 2023-01-03 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32650 | Medium | 6.7 | 2023-01-03 | In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32649 | Medium | 6.7 | 2023-01-03 | In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. Use… |
CVE-2022-32648 | Medium | 6.4 | 2023-01-03 | In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32647 | Medium | 6.7 | 2023-01-03 | In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-32646 | Medium | 6.7 | 2023-01-03 | In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-32645 | Medium | 4.1 | 2023-01-03 | In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges ne… |
CVE-2022-32644 | Medium | 6.4 | 2023-01-03 | In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-32641 | Medium | 6.7 | 2023-01-03 | In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2022-32640 | Medium | 6.7 | 2023-01-03 | In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-32639 | Medium | 4.4 | 2023-01-03 | In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-32638 | Medium | 6.4 | 2023-01-03 | In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2022-32637 | Medium | 6.7 | 2023-01-03 | In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-32636 | Medium | 6.7 | 2023-01-03 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-32635 | High | 7.8 | 2023-01-03 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2022-32623 | Medium | 6.7 | 2023-01-03 | In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privile… |
CVE-2022-32634 | Medium | 6.7 | 2022-12-05 | In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-32633 | Medium | 6.7 | 2022-12-05 | In Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-32632 | Medium | 6.7 | 2022-12-05 | In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution priv… |
CVE-2022-32631 | Medium | 6.7 | 2022-12-05 | In Wi-Fi, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution priv… |
CVE-2022-32630 | Medium | 6.7 | 2022-12-05 | In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with Sy… |
CVE-2022-32629 | Medium | 6.7 | 2022-12-05 | In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-32628 | Medium | 6.7 | 2022-12-05 | In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-32626 | Medium | 6.7 | 2022-12-05 | In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-32625 | Medium | 6.7 | 2022-12-05 | In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-32624 | Medium | 6.7 | 2022-12-05 | In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with Sy… |
CVE-2022-32622 | Medium | 6.7 | 2022-12-05 | In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-32621 | Medium | 6.4 | 2022-12-05 | In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2022-32620 | Medium | 6.7 | 2022-12-05 | In mpu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-32619 | Medium | 6.7 | 2022-12-05 | In keyinstall, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-32598 | Medium | 6.7 | 2022-12-05 | In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-32597 | Medium | 6.7 | 2022-12-05 | In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-32596 | Medium | 6.7 | 2022-12-05 | In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-32594 | Medium | 6.7 | 2022-12-05 | In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-32618 | Medium | 6.8 | 2022-11-08 | In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, for an atta… |
CVE-2022-32617 | Medium | 6.8 | 2022-11-08 | In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, for an atta… |
CVE-2022-32616 | Medium | 6.7 | 2022-11-08 | In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-32615 | Medium | 6.7 | 2022-11-08 | In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-32614 | Medium | 6.7 | 2022-11-08 | In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32613 | Medium | 6.4 | 2022-11-08 | In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32612 | Medium | 6.4 | 2022-11-08 | In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-32611 | Medium | 6.7 | 2022-11-08 | In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-32610 | Medium | 6.4 | 2022-11-08 | In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-32609 | Medium | 6.4 | 2022-11-08 | In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-32608 | Medium | 6.4 | 2022-11-08 | In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32607 | Medium | 6.7 | 2022-11-08 | In aee, there is a possible use after free due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2022-32605 | Medium | 6.7 | 2022-11-08 | In isp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-32603 | Medium | 6.7 | 2022-11-08 | In gpu drm, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-32602 | Medium | 5.5 | 2022-11-08 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi… |
CVE-2022-32601 | High | 7.8 | 2022-11-08 | In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-26446 | High | 7.5 | 2022-11-08 | In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SI… |
CVE-2022-21778 | Medium | 6.7 | 2022-11-08 | In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-32593 | Medium | 6.7 | 2022-10-07 | In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2022-32592 | Medium | 6.7 | 2022-10-07 | In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2022-32591 | High | 7.5 | 2022-10-07 | In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges… |