Mediatek
Page 5 of 11 — Mediatek CVEs from a corpus of 1038, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32865 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2023-32864 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2023-32863 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32862 | Medium | 6.7 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32861 | Medium | 6.7 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32860 | Medium | 6.7 | 2023-12-04 | In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32859 | Medium | 6.7 | 2023-12-04 | In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-32858 | Medium | 4.4 | 2023-12-04 | In GZ, there is a possible information disclosure due to a missing data erasing. This could lead to local information disclosure with System execution privileg… |
CVE-2023-32857 | Medium | 4.4 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution priv… |
CVE-2023-32856 | Medium | 4.4 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution priv… |
CVE-2023-32855 | Medium | 6.7 | 2023-12-04 | In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32854 | Medium | 6.7 | 2023-12-04 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32853 | Medium | 6.7 | 2023-12-04 | In rpmb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-32852 | Medium | 4.4 | 2023-12-04 | In cameraisp, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System executio… |
CVE-2023-32851 | High | 7.8 | 2023-12-04 | In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional executio… |
CVE-2023-32850 | High | 7.8 | 2023-12-04 | In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution p… |
CVE-2023-32849 | Medium | 6.7 | 2023-12-04 | In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32848 | Medium | 6.7 | 2023-12-04 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32847 | High | 7.8 | 2023-12-04 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution… |
CVE-2023-32846 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32845 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32844 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32843 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32842 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32841 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32840 | Medium | 6.5 | 2023-11-06 | In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32839 | Medium | 6.7 | 2023-11-06 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32838 | Medium | 6.7 | 2023-11-06 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32837 | High | 7.8 | 2023-11-06 | In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution… |
CVE-2023-32836 | Medium | 6.7 | 2023-11-06 | In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-32835 | Medium | 6.7 | 2023-11-06 | In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32834 | Medium | 6.7 | 2023-11-06 | In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32832 | High | 7.0 | 2023-11-06 | In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2023-32825 | Medium | 5.5 | 2023-11-06 | In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additi… |
CVE-2023-32818 | Medium | 6.7 | 2023-11-06 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20702 | High | 7.5 | 2023-11-06 | In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte… |
CVE-2023-32830 | Medium | 6.7 | 2023-10-02 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-32829 | Medium | 6.7 | 2023-10-02 | In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32828 | Medium | 6.7 | 2023-10-02 | In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32827 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32826 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32824 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-32823 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32822 | Medium | 6.7 | 2023-10-02 | In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32821 | Medium | 6.7 | 2023-10-02 | In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32820 | High | 7.5 | 2023-10-02 | In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional executi… |
CVE-2023-32819 | Medium | 4.4 | 2023-10-02 | In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-20819 | Critical | 9.8 | 2023-10-02 | In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no addition… |
CVE-2023-32817 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32816 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32815 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32814 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32813 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System executio… |
CVE-2023-32812 | Medium | 6.7 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System executi… |
CVE-2023-32811 | Medium | 6.7 | 2023-09-04 | In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with… |
CVE-2023-32810 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution p… |
CVE-2023-32809 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak… |
CVE-2023-32808 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak… |
CVE-2023-32807 | Medium | 4.4 | 2023-09-04 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32806 | Medium | 6.7 | 2023-09-04 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executio… |
CVE-2023-32805 | Medium | 6.5 | 2023-09-04 | In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20851 | Medium | 6.3 | 2023-09-04 | In stc, there is a possible out of bounds read due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20850 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System exe… |
CVE-2023-20849 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System executio… |
CVE-2023-20848 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local escalation of privilege with System exec… |
CVE-2023-20847 | Medium | 4.2 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local denial of service with System execution… |
CVE-2023-20846 | Medium | 4.2 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execu… |
CVE-2023-20845 | Medium | 4.2 | 2023-09-04 | In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution… |
CVE-2023-20844 | Medium | 4.2 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execu… |
CVE-2023-20843 | Medium | 4.2 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execu… |
CVE-2023-20842 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System exe… |
CVE-2023-20841 | Medium | 6.5 | 2023-09-04 | In imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System executio… |
CVE-2023-20840 | Medium | 6.5 | 2023-09-04 | In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with System… |
CVE-2023-20839 | Medium | 4.2 | 2023-09-04 | In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution… |
CVE-2023-20838 | Medium | 4.0 | 2023-09-04 | In imgsys, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges nee… |
CVE-2023-20837 | Medium | 6.7 | 2023-09-04 | In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20836 | Medium | 4.4 | 2023-09-04 | In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2023-20835 | Medium | 6.4 | 2023-09-04 | In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20834 | Medium | 6.4 | 2023-09-04 | In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20833 | Medium | 4.4 | 2023-09-04 | In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-20832 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20831 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20830 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20829 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20828 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20827 | Medium | 6.4 | 2023-09-04 | In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20826 | Medium | 5.5 | 2023-09-04 | In cta, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execut… |
CVE-2023-20825 | Medium | 5.5 | 2023-09-04 | In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2023-20824 | Medium | 5.5 | 2023-09-04 | In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2023-20823 | Medium | 4.4 | 2023-09-04 | In cmdq, there is a possible out of bounds read due to an incorrect status check. This could lead to local denial of service with System execution privileges n… |
CVE-2023-20822 | Medium | 6.7 | 2023-09-04 | In netdagent, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20821 | Medium | 6.7 | 2023-09-04 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20820 | High | 7.2 | 2023-09-04 | In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privile… |
CVE-2023-20818 | Medium | 4.4 | 2023-08-07 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20817 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20816 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20815 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20814 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20813 | Medium | 4.4 | 2023-08-07 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20812 | Medium | 4.4 | 2023-08-07 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution… |