Mediatek Mt8891
12 CVEs affecting Mediatek Mt8891. Latest disclosed: 2023-04-06. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20655 | High | 7.8 | 2023-04-06 | In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution pri… |
CVE-2023-20670 | Medium | 6.7 | 2023-04-06 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20664 | Medium | 6.7 | 2023-04-06 | In gz, there is a possible double free due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User… |
CVE-2023-20654 | Medium | 6.7 | 2023-04-06 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20653 | Medium | 6.7 | 2023-04-06 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20652 | Medium | 6.7 | 2023-04-06 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2022-32616 | Medium | 6.7 | 2022-11-08 | In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-32615 | Medium | 6.7 | 2022-11-08 | In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-32607 | Medium | 6.7 | 2022-11-08 | In aee, there is a possible use after free due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2023-20685 | Medium | 6.4 | 2023-04-06 | In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20684 | Medium | 6.4 | 2023-04-06 | In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20688 | Medium | 4.4 | 2023-04-06 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privilege… |