Android

CVEs (8,504)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2023-32807	Mediatek wlan service	Med	0.29	4.4	Sep 4, 2023	In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360.
CVE-2023-20836	Mediatek camsys	Med	0.29	4.4	Sep 4, 2023	In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629.
CVE-2023-20833	Mediatek keyInstall	Med	0.29	4.4	Sep 4, 2023	In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764.
CVE-2023-20823	Mediatek cmdq	Med	0.29	4.4	Sep 4, 2023	In cmdq, there is a possible out of bounds read due to an incorrect status check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08021592; Issue ID: ALPS08021592.
CVE-2023-38468	UNISOC urild service	Med	0.29	4.4	Sep 4, 2023	In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-38467	UNISOC urild service	Med	0.29	4.4	Sep 4, 2023	In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2022-48453	UNISOC camera driver	Med	0.29	4.4	Sep 4, 2023	In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2022-48452	Ifaa Ifaa service	Med	0.29	4.4	Sep 4, 2023	In Ifaa service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed
CVE-2022-47353	UNISOC vdsp device	Med	0.29	4.4	Sep 4, 2023	In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of service with System execution privileges needed
CVE-2022-47352	UNISOC camera driver	Med	0.29	4.4	Sep 4, 2023	In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-20818	Mediatek wlan service	Med	0.29	4.4	Aug 7, 2023	In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460540; Issue ID: ALPS07460540.
CVE-2023-20813	Mediatek wlan service	Med	0.29	4.4	Aug 7, 2023	In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453549; Issue ID: ALPS07453549.
CVE-2023-20812	Mediatek wlan driver	Med	0.29	4.4	Aug 7, 2023	In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.
CVE-2023-20810	Mediatek IOMMU	Med	0.29	4.4	Aug 7, 2023	In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.
CVE-2023-20798	Mediatek pda	Med	0.29	4.4	Aug 7, 2023	In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076.
CVE-2023-20796	Mediatek power	Med	0.29	4.4	Aug 7, 2023	In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790.
CVE-2023-20793	Mediatek APU	Med	0.29	4.4	Aug 7, 2023	In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767818; Issue ID: ALPS07767818.
CVE-2023-20790	Mediatek nvram	Med	0.29	4.4	Aug 7, 2023	In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.
CVE-2023-20789	Mediatek jpeg	Med	0.29	4.4	Aug 7, 2023	In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07693193; Issue ID: ALPS07693193.
CVE-2023-20782	Mediatek keyInstall	Med	0.29	4.4	Aug 7, 2023	In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550103.

CVE-2023-32807MedSep 4, 2023
Mediatek
wlan service
risk 0.29cvss 4.4epss 0.00
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360.
CVE-2023-20836MedSep 4, 2023
Mediatek
camsys
risk 0.29cvss 4.4epss 0.00
In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07505629; Issue ID: ALPS07505629.
CVE-2023-20833MedSep 4, 2023
Mediatek
keyInstall
risk 0.29cvss 4.4epss 0.00
In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS08017764.
CVE-2023-20823MedSep 4, 2023
Mediatek
cmdq
risk 0.29cvss 4.4epss 0.00
In cmdq, there is a possible out of bounds read due to an incorrect status check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08021592; Issue ID: ALPS08021592.
CVE-2023-38468MedSep 4, 2023
UNISOC
urild service
risk 0.29cvss 4.4epss 0.00
In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-38467MedSep 4, 2023
UNISOC
urild service
risk 0.29cvss 4.4epss 0.00
In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2022-48453MedSep 4, 2023
UNISOC
camera driver
risk 0.29cvss 4.4epss 0.00
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2022-48452MedSep 4, 2023
Ifaa
Ifaa service
risk 0.29cvss 4.4epss 0.00
In Ifaa service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed
CVE-2022-47353MedSep 4, 2023
UNISOC
vdsp device
risk 0.29cvss 4.4epss 0.00
In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of service with System execution privileges needed
CVE-2022-47352MedSep 4, 2023
UNISOC
camera driver
risk 0.29cvss 4.4epss 0.00
In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-20818MedAug 7, 2023
Mediatek
wlan service
risk 0.29cvss 4.4epss 0.00
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460540; Issue ID: ALPS07460540.
CVE-2023-20813MedAug 7, 2023
Mediatek
wlan service
risk 0.29cvss 4.4epss 0.00
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453549; Issue ID: ALPS07453549.
CVE-2023-20812MedAug 7, 2023
Mediatek
wlan driver
risk 0.29cvss 4.4epss 0.00
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987.
CVE-2023-20810MedAug 7, 2023
Mediatek
IOMMU
risk 0.29cvss 4.4epss 0.00
In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.
CVE-2023-20798MedAug 7, 2023
Mediatek
pda
risk 0.29cvss 4.4epss 0.00
In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076.
CVE-2023-20796MedAug 7, 2023
Mediatek
power
risk 0.29cvss 4.4epss 0.00
In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929790; Issue ID: ALPS07929790.
CVE-2023-20793MedAug 7, 2023
Mediatek
APU
risk 0.29cvss 4.4epss 0.00
In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767818; Issue ID: ALPS07767818.
CVE-2023-20790MedAug 7, 2023
Mediatek
nvram
risk 0.29cvss 4.4epss 0.00
In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.
CVE-2023-20789MedAug 7, 2023
Mediatek
jpeg
risk 0.29cvss 4.4epss 0.00
In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07693193; Issue ID: ALPS07693193.
CVE-2023-20782MedAug 7, 2023
Mediatek
keyInstall
risk 0.29cvss 4.4epss 0.00
In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550103.

Page 381 of 426