VYPR
← Mediatek

Vendor CVEs

Mediatek

All CVEs

1,199 total · sorted by risk
  • CVE-2022-32602MedNov 8, 2022
    Mediatek
    keyInstall
    risk 0.36cvss 5.5epss 0.00

    In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07388790; Issue ID: ALPS07388790.

  • CVE-2022-21764MedJul 6, 2022
    Mediatek
    Telecom Service
    risk 0.36cvss 5.5epss 0.00

    In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044717; Issue ID:…

  • CVE-2022-21763MedJul 6, 2022
    Mediatek
    Telecom Service
    risk 0.36cvss 5.5epss 0.00

    In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044717; Issue ID:…

  • CVE-2022-21749MedJun 6, 2022
    Mediatek
    telephony
    risk 0.36cvss 5.5epss 0.00

    In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06511058; Issue ID:…

  • CVE-2022-21748MedJun 6, 2022
    Mediatek
    telephony
    risk 0.36cvss 5.5epss 0.00

    In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06511030; Issue ID: ALPS06511030.

  • CVE-2022-20104MedMay 3, 2022
    Mediatek
    aee daemon
    risk 0.36cvss 5.5epss 0.00

    In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID:…

  • CVE-2022-20101MedMay 3, 2022
    Mediatek
    aee daemon
    risk 0.36cvss 5.5epss 0.00

    In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06270870.

  • CVE-2022-20092MedMay 3, 2022
    Mediatek
    ALAC Decoder
    risk 0.36cvss 5.5epss 0.00

    In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061.

  • CVE-2022-20051MedMar 10, 2022
    Mediatek
    ims service
    risk 0.36cvss 5.5epss 0.00

    In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219127; Issue…

  • CVE-2022-20046MedFeb 9, 2022
    Mediatek
    Bluetooth
    risk 0.36cvss 5.5epss 0.00

    In Bluetooth, there is a possible memory corruption due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06142410; Issue ID: ALPS06142410.

  • CVE-2022-20042MedFeb 9, 2022
    Mediatek
    Bluetooth
    risk 0.36cvss 5.5epss 0.00

    In Bluetooth, there is a possible information disclosure due to incorrect error handling. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108487; Issue ID:…

  • CVE-2022-20037MedFeb 9, 2022
    Mediatek
    ion driver
    risk 0.36cvss 5.5epss 0.00

    In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171705; Issue ID:…

  • CVE-2022-20036MedFeb 9, 2022
    Mediatek
    ion driver
    risk 0.36cvss 5.5epss 0.00

    In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171689; Issue ID:…

  • CVE-2022-20017MedFeb 9, 2022
    Mediatek
    ion driver
    risk 0.36cvss 5.5epss 0.00

    In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862991; Issue ID:…

  • CVE-2022-20020MedJan 4, 2022
    Mediatek
    libvcodecdrv
    risk 0.36cvss 5.5epss 0.00

    In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05943906; Issue ID:…

  • CVE-2022-20019MedJan 4, 2022
    Mediatek
    libMtkOmxGsmDec
    risk 0.36cvss 5.5epss 0.00

    In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917620; Issue ID:…

  • CVE-2021-0674MedDec 17, 2021
    Mediatek
    ALAC Decoder
    risk 0.36cvss 5.5epss 0.01

    In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID:…

  • CVE-2021-0624MedNov 18, 2021
    Mediatek
    flv extractor
    risk 0.36cvss 5.5epss 0.00

    In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594988; Issue ID: ALPS05594988.

  • CVE-2021-0623MedNov 18, 2021
    Mediatek
    asf extractor
    risk 0.36cvss 5.5epss 0.00

    In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05585817.

  • CVE-2021-0622MedNov 18, 2021
    Mediatek
    asf extractor
    risk 0.36cvss 5.5epss 0.00

    In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561388.

  • CVE-2021-0621MedNov 18, 2021
    Mediatek
    asf extractor
    risk 0.36cvss 5.5epss 0.00

    In asf extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561383.

  • CVE-2021-0620MedNov 18, 2021
    Mediatek
    asf extractor
    risk 0.36cvss 5.5epss 0.00

    In asf extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561381.

  • CVE-2021-0619MedNov 18, 2021
    Mediatek
    ape extractor
    risk 0.36cvss 5.5epss 0.00

    In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561395; Issue ID: ALPS05561395.

  • CVE-2021-0618MedOct 25, 2021
    Mediatek
    ape extractor
    risk 0.36cvss 5.5epss 0.00

    In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561394; Issue ID: ALPS05561394.

  • CVE-2021-0617MedOct 25, 2021
    Mediatek
    ape extractor
    risk 0.36cvss 5.5epss 0.00

    In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391.

  • CVE-2021-0616MedOct 25, 2021
    Mediatek
    ape extractor
    risk 0.36cvss 5.5epss 0.00

    In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561389; Issue ID: ALPS05561389.

  • CVE-2021-0615MedOct 25, 2021
    Mediatek
    flv extractor
    risk 0.36cvss 5.5epss 0.00

    In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561369; Issue ID: ALPS05561369.

  • CVE-2021-0614MedOct 25, 2021
    Mediatek
    asf extractor
    risk 0.36cvss 5.5epss 0.00

    In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05495528; Issue ID:…

  • CVE-2021-0613MedOct 25, 2021
    Mediatek
    asf extractor
    risk 0.36cvss 5.5epss 0.00

    In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID:…

  • CVE-2021-0414MedOct 25, 2021
    Mediatek
    flv extractor
    risk 0.36cvss 5.5epss 0.00

    In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561384; Issue ID: ALPS05561384.

  • CVE-2021-0413MedOct 25, 2021
    Mediatek
    flv extractor
    risk 0.36cvss 5.5epss 0.00

    In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561379; Issue ID: ALPS05561379.

  • CVE-2021-0412MedOct 25, 2021
    Mediatek
    flv extractor
    risk 0.36cvss 5.5epss 0.00

    In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561366; Issue ID: ALPS05561366.

  • CVE-2021-0411MedOct 25, 2021
    Mediatek
    flv extractor
    risk 0.36cvss 5.5epss 0.00

    In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561362; Issue ID: ALPS05561362.

  • CVE-2021-0410MedOct 25, 2021
    Mediatek
    flv extractor
    risk 0.36cvss 5.5epss 0.00

    In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID:…

  • CVE-2021-0409MedOct 25, 2021
    Mediatek
    flv extractor
    risk 0.36cvss 5.5epss 0.00

    In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561359; Issue ID:…

  • CVE-2021-0425MedSep 27, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05400059.

  • CVE-2021-0424MedSep 27, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05393787.

  • CVE-2021-0423MedSep 27, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID:…

  • CVE-2021-0422MedSep 27, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381071.

  • CVE-2021-0421MedSep 27, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue…

  • CVE-2021-0420MedAug 18, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381065.

  • CVE-2021-0419MedAug 18, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID:…

  • CVE-2021-0418MedAug 18, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID:…

  • CVE-2021-0417MedAug 18, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID:…

  • CVE-2021-0416MedAug 18, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID:…

  • CVE-2021-0415MedAug 18, 2021
    Mediatek
    Memory Management Driver
    risk 0.36cvss 5.5epss 0.00

    In memory management driver, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499;…

  • CVE-2021-0408MedAug 18, 2021
    Mediatek
    asf extractor
    risk 0.36cvss 5.5epss 0.00

    In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489195; Issue ID:…

  • CVE-2019-15386MedNov 14, 2019
    LAVA
    Z60s
    risk 0.36cvss 5.5epss 0.00

    The Lava Z60s Android device with a build fingerprint of LAVA/Z60s/Z60s:8.1.0/O11019/1530331229:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to…

  • CVE-2019-15385MedNov 14, 2019
    Mediatek
    com.mediatek.wfo.impl
    risk 0.36cvss 5.5epss 0.00

    The Infinix Note 5 Android device with a build fingerprint of Infinix/H633B/Infinix-X604_sprout:8.1.0/O11019/L-IN-180206V64:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app…

  • CVE-2019-15383MedNov 14, 2019
    Mediatek
    com.mediatek.wfo.impl
    risk 0.36cvss 5.5epss 0.00

    The Allview X5 Android device with a build fingerprint of ALLVIEW/X5_Soul_Mini/X5_Soul_Mini:8.1.0/O11019/1522468763:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app…

Page 19 of 24