Mt8370 (Mediatek Inc.) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-11-04. Vendor: Mediatek Inc..

CVEs of Mt8370

CVE-2025-20745 - CVSS 4.2 (medium), 2025-11-04: In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already…
CVE-2025-20721 - CVSS 7.8 (high), 2025-10-14: In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2025-20696 - CVSS 6.8 (medium), 2025-08-04: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20694 - CVSS 6.5 (medium), 2025-07-08: In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution…
CVE-2025-20665 - CVSS 5.5 (medium), 2025-05-05: In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier…
CVE-2025-20656 - CVSS 6.8 (medium), 2025-04-07: In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20653 - CVSS 6.5 (medium), 2025-03-03: In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access…
CVE-2025-20650 - CVSS 6.8 (medium), 2025-03-03: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2025-20648 - CVSS 5.5 (medium), 2025-03-03: In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…
CVE-2025-20651 - CVSS 4.1 (medium), 2025-03-03: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical…
CVE-2025-20635 - CVSS 6.6 (medium), 2025-02-03: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2024-20147 - CVSS 5.3 (medium), 2025-02-03: In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional…
CVE-2024-20144 - CVSS 6.6 (medium), 2025-01-06: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2024-20143 - CVSS 6.6 (medium), 2025-01-06: In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical…
CVE-2024-20138 - CVSS 7.5 (high), 2024-12-02: In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional…
CVE-2024-20136 - CVSS 6.2 (medium), 2024-12-02: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…
CVE-2024-20125 - CVSS 6.7 (medium), 2024-12-02: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has…
CVE-2024-20107 - CVSS 6.2 (medium), 2024-11-04: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution…
CVE-2024-20108 - CVSS 6.7 (medium), 2024-11-04: In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution…
CVE-2024-20104 - CVSS 8.4 (high), 2024-11-04: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution…
CVE-2024-20059 - CVSS 6.7 (medium), 2024-05-06: In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution…
CVE-2024-20060 - CVSS 5.9 (medium), 2024-05-06: In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution…
CVE-2024-20055 - CVSS 6.3 (medium), 2024-04-01: In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20040 - CVSS 8.8 (high), 2024-04-01: In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no…
CVE-2024-20033 - CVSS 4.4 (medium), 2024-03-04: In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution…
CVE-2024-20023 - CVSS 6.7 (medium), 2024-03-04: In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution…
CVE-2023-32891 - CVSS 6.7 (medium), 2024-01-02: In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System…