Mediatek
Page 10 of 11 — Mediatek CVEs from a corpus of 1038, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-20068 | Medium | 6.7 | 2022-04-11 | In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System e… |
CVE-2022-20067 | Medium | 6.7 | 2022-04-11 | In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-20066 | Medium | 4.4 | 2022-04-11 | In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to local information disclosure with System… |
CVE-2022-20065 | Medium | 6.7 | 2022-04-11 | In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2022-20064 | Medium | 6.7 | 2022-04-11 | In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2022-20063 | Medium | 6.5 | 2022-04-11 | In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-20062 | Medium | 6.7 | 2022-04-11 | In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-20052 | Medium | 6.5 | 2022-04-11 | In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-20060 | Medium | 6.6 | 2022-03-10 | In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for a… |
CVE-2022-20059 | Medium | 6.6 | 2022-03-10 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-20058 | Medium | 6.6 | 2022-03-10 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-20057 | Medium | 6.5 | 2022-03-10 | In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileg… |
CVE-2022-20056 | Medium | 6.6 | 2022-03-10 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-20055 | Medium | 6.8 | 2022-03-10 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-20054 | High | 7.8 | 2022-03-10 | In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional… |
CVE-2022-20053 | High | 7.8 | 2022-03-10 | In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additio… |
CVE-2022-20051 | Medium | 5.5 | 2022-03-10 | In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no a… |
CVE-2022-20050 | Medium | 6.7 | 2022-03-10 | In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System exe… |
CVE-2022-20049 | Medium | 6.7 | 2022-03-10 | In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-20048 | High | 7.8 | 2022-03-10 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2022-20047 | High | 7.8 | 2022-03-10 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2022-20046 | Medium | 5.5 | 2022-02-09 | In Bluetooth, there is a possible memory corruption due to a logic error. This could lead to local denial of service with no additional execution privileges ne… |
CVE-2022-20045 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2022-20044 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2022-20043 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additiona… |
CVE-2022-20042 | Medium | 5.5 | 2022-02-09 | In Bluetooth, there is a possible information disclosure due to incorrect error handling. This could lead to local information disclosure with no additional ex… |
CVE-2022-20041 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additiona… |
CVE-2022-20040 | High | 7.8 | 2022-02-09 | In power_hal_manager_service, there is a possible permission bypass due to a stack-based buffer overflow. This could lead to local escalation of privilege with… |
CVE-2022-20039 | Medium | 6.7 | 2022-02-09 | In ccu driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privile… |
CVE-2022-20038 | Medium | 6.7 | 2022-02-09 | In ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2022-20037 | Medium | 5.5 | 2022-02-09 | In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional… |
CVE-2022-20036 | Medium | 5.5 | 2022-02-09 | In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional… |
CVE-2022-20035 | Medium | 4.4 | 2022-02-09 | In vcu driver, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-20034 | Medium | 6.8 | 2022-02-09 | In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege fo… |
CVE-2022-20033 | Medium | 4.4 | 2022-02-09 | In camera driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System executio… |
CVE-2022-20032 | Medium | 4.1 | 2022-02-09 | In vow driver, there is a possible memory corruption due to a race condition. This could lead to local information disclosure with System execution privileges… |
CVE-2022-20031 | High | 7.8 | 2022-02-09 | In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution priv… |
CVE-2022-20030 | Medium | 6.7 | 2022-02-09 | In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execu… |
CVE-2022-20029 | Medium | 4.4 | 2022-02-09 | In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution… |
CVE-2022-20028 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-20027 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-20026 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-20025 | High | 7.8 | 2022-02-09 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-20024 | High | 7.8 | 2022-02-09 | In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional… |
CVE-2022-20017 | Medium | 5.5 | 2022-02-09 | In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional… |
CVE-2021-30636 | Critical | 9.8 | 2022-01-24 | In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and p… |
CVE-2022-20023 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of… |
CVE-2022-20022 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from a host with the same BD address as the… |
CVE-2022-20021 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lea… |
CVE-2022-20020 | Medium | 5.5 | 2022-01-04 | In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional e… |
CVE-2022-20019 | Medium | 5.5 | 2022-01-04 | In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additi… |
CVE-2022-20018 | Medium | 4.4 | 2022-01-04 | In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution p… |
CVE-2022-20016 | Medium | 6.7 | 2022-01-04 | In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-20015 | Medium | 4.4 | 2022-01-04 | In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execu… |
CVE-2022-20014 | Medium | 6.7 | 2022-01-04 | In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution p… |
CVE-2022-20013 | Medium | 6.4 | 2022-01-04 | In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-20012 | High | 7.8 | 2022-01-04 | In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution… |
CVE-2021-41789 | Medium | 6.5 | 2022-01-04 | In wifi driver, there is a possible system crash due to a missing validation check. This could lead to remote denial of service from a proximal attacker with n… |
CVE-2021-40148 | High | 7.5 | 2022-01-04 | In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional… |
CVE-2021-41788 | Medium | 6.5 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authentication flooding. (Affected Chipsets M… |
CVE-2021-37584 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37583 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37572 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37571 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37570 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37569 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37568 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37567 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37566 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7610, MT7613… |
CVE-2021-37565 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37564 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37563 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37562 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37561 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37560 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-35055 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32469 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32468 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32467 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-0903 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0902 | Medium | 4.4 | 2021-12-17 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0901 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-0900 | Medium | 4.4 | 2021-12-17 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0899 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0898 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0897 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0896 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0895 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0894 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0893 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0679 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-0678 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0677 | Medium | 4.4 | 2021-12-17 | In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privile… |
CVE-2021-0676 | Medium | 4.4 | 2021-12-17 | In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execu… |
CVE-2021-0674 | Medium | 5.5 | 2021-12-17 | In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional ex… |
CVE-2021-0673 | High | 7.8 | 2021-12-17 | In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additio… |
CVE-2021-0904 | Medium | 6.7 | 2021-12-15 | In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution… |
CVE-2021-0675 | High | 7.8 | 2021-12-15 | In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional… |
CVE-2021-0672 | Medium | 5.5 | 2021-11-18 | In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additiona… |
CVE-2021-0671 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |