Mt6799 (Mediatek Inc.) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-10-02. Vendor: Mediatek Inc..

CVEs of Mt6799

CVE-2023-20819 - CVSS 9.8 (critical), 2023-10-02: In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no…
CVE-2022-21763 - CVSS 5.5 (medium), 2022-07-06: In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no…
CVE-2022-21744 - CVSS 9.8 (critical), 2022-07-06: In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet…
CVE-2022-21775 - CVSS 6.7 (medium), 2022-07-06: In sched driver, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges…
CVE-2022-21764 - CVSS 5.5 (medium), 2022-07-06: In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no…
CVE-2022-20083 - CVSS 9.8 (critical), 2022-07-06: In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined…
CVE-2022-21755 - CVSS 4.4 (medium), 2022-06-06: In WLAN driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution…
CVE-2022-21749 - CVSS 5.5 (medium), 2022-06-06: In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional…
CVE-2022-20084 - CVSS 7.8 (high), 2022-05-03: In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This could lead to local escalation of…
CVE-2022-20093 - CVSS 7.8 (high), 2022-05-03: In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. This could lead to local escalation of privilege…
CVE-2022-20070 - CVSS 6.7 (medium), 2022-04-11: In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2022-20073 - CVSS 6.6 (medium), 2022-04-11: In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who…
CVE-2022-20072 - CVSS 6.7 (medium), 2022-04-11: In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to local escalation of…
CVE-2022-20069 - CVSS 6.6 (medium), 2022-04-11: In preloader (usb), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege, for an attacker who…
CVE-2022-20068 - CVSS 6.7 (medium), 2022-04-11: In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System…
CVE-2022-20051 - CVSS 5.5 (medium), 2022-03-10: In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no…
CVE-2022-20053 - CVSS 7.8 (high), 2022-03-10: In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no…
CVE-2022-20050 - CVSS 6.7 (medium), 2022-03-10: In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System…
CVE-2022-20036 - CVSS 5.5 (medium), 2022-02-09: In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional…
CVE-2022-20034 - CVSS 6.8 (medium), 2022-02-09: In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege…
CVE-2022-20031 - CVSS 7.8 (high), 2022-02-09: In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution…
CVE-2022-20037 - CVSS 5.5 (medium), 2022-02-09: In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional…
CVE-2022-20019 - CVSS 5.5 (medium), 2022-01-04: In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no…