Mediatek
Page 11 of 11 — Mediatek CVEs from a corpus of 1068, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-37564 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615… |
CVE-2021-37563 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37562 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37561 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-37560 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-35055 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32469 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32468 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-32467 | High | 8.2 | 2021-12-26 | MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT… |
CVE-2021-0903 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0902 | Medium | 4.4 | 2021-12-17 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0901 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-0900 | Medium | 4.4 | 2021-12-17 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0899 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0898 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0897 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0896 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0895 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0894 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0893 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0679 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-0678 | Medium | 6.7 | 2021-12-17 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0677 | Medium | 4.4 | 2021-12-17 | In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privile… |
CVE-2021-0676 | Medium | 4.4 | 2021-12-17 | In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execu… |
CVE-2021-0674 | Medium | 5.5 | 2021-12-17 | In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional ex… |
CVE-2021-0673 | High | 7.8 | 2021-12-17 | In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additio… |
CVE-2021-0904 | Medium | 6.7 | 2021-12-15 | In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution… |
CVE-2021-0675 | High | 7.8 | 2021-12-15 | In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional… |
CVE-2021-0672 | Medium | 5.5 | 2021-11-18 | In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additiona… |
CVE-2021-0671 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-0670 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0669 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0668 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0667 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2021-0666 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0665 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0664 | Medium | 6.7 | 2021-11-18 | In ccu, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-0659 | Medium | 4.4 | 2021-11-18 | In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2021-0658 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0657 | Medium | 6.7 | 2021-11-18 | In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution… |
CVE-2021-0656 | Medium | 6.7 | 2021-11-18 | In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-0655 | Medium | 6.7 | 2021-11-18 | In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System executi… |
CVE-2021-0629 | Medium | 6.7 | 2021-11-18 | In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0624 | Medium | 5.5 | 2021-11-18 | In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0623 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional executi… |
CVE-2021-0622 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0621 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional executi… |
CVE-2021-0620 | Medium | 5.5 | 2021-11-18 | In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exec… |
CVE-2021-0619 | Medium | 5.5 | 2021-11-18 | In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… |
CVE-2021-25477 | Medium | 4.4 | 2021-10-06 | An improper error handling in Mediatek RRC Protocol stack prior to SMR Oct-2021 Release 1 allows modem crash and remote denial of service. |
CVE-2021-0660 | Medium | 4.9 | 2021-09-27 | In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosure with System execution privileges need… |
CVE-2021-0612 | High | 7.8 | 2021-09-27 | In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-0611 | High | 7.8 | 2021-09-27 | In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2021-0610 | High | 7.8 | 2021-09-27 | In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additio… |
CVE-2021-0425 | Medium | 5.5 | 2021-09-27 | In memory management driver, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execut… |
CVE-2021-0424 | Medium | 5.5 | 2021-09-27 | In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional exec… |
CVE-2021-0423 | Medium | 5.5 | 2021-09-27 | In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no addi… |
CVE-2021-0422 | Medium | 5.5 | 2021-09-27 | In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional exec… |
CVE-2021-0421 | Medium | 5.5 | 2021-09-27 | In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2021-32487 | High | 7.5 | 2021-09-09 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privi… |
CVE-2021-32486 | High | 7.5 | 2021-09-09 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privi… |
CVE-2021-32485 | High | 7.5 | 2021-09-09 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privi… |
CVE-2021-32484 | High | 7.5 | 2021-09-09 | In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privi… |
CVE-2019-18989 | Medium | 5.4 | 2020-09-30 | A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-pro… |
CVE-2018-21054 | Critical | 9.8 | 2020-04-08 | An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8909 SC77xx/9830 exy… |
CVE-2018-21089 | Critical | 9.8 | 2020-04-08 | An issue was discovered on Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models) software. Bootloader has an integer overflow that leads to arbitr… |
CVE-2019-15027 | Critical | 9.8 | 2019-08-14 | The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as… |
CVE-2018-12041 | High | 7.5 | 2018-06-08 | An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 8… |