mediatek Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mediatek/ Sun, 26 Feb 2023 06:31:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png mediatek Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/mediatek/ 32 32 CVE-2019-18989 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-18989/ Sun, 26 Feb 2023 06:31:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-18989/ A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.

The post CVE-2019-18989 appeared first on CVE Vulnerability.

]]> A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.

The post CVE-2019-18989 appeared first on CVE Vulnerability.

]]> CVE-2019-15027 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15027/ Sun, 26 Feb 2023 06:30:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15027/ The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clear_emmc_nomedia_entry in platform/mt6577/external/meta/emmc/meta_clr_emmc.c invokes ‘system(“/system/bin/rm -r /data/’ followed by this filename upon an eMMC clearance from a Meta Mode boot. NOTE: compromise […]

The post CVE-2019-15027 appeared first on CVE Vulnerability.

]]> The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clear_emmc_nomedia_entry in platform/mt6577/external/meta/emmc/meta_clr_emmc.c invokes ‘system(“/system/bin/rm -r /data/’ followed by this filename upon an eMMC clearance from a Meta Mode boot. NOTE: compromise of Fire OS on the Amazon Echo Dot would require a second hypothetical vulnerability that allows creation of the required file under /data.

The post CVE-2019-15027 appeared first on CVE Vulnerability.

]]> CVE-2021-0676 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-0676/ Thu, 23 Feb 2023 14:06:18 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-0676/ In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863009; Issue ID: ALPS05863009.

The post CVE-2021-0676 appeared first on CVE Vulnerability.

]]> In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863009; Issue ID: ALPS05863009.

The post CVE-2021-0676 appeared first on CVE Vulnerability.

]]> CVE-2021-0674 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-0674/ Thu, 23 Feb 2023 14:06:18 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-0674/ In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237.

The post CVE-2021-0674 appeared first on CVE Vulnerability.

]]> In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237.

The post CVE-2021-0674 appeared first on CVE Vulnerability.

]]> CVE-2022-26468 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-26468/ Thu, 23 Feb 2023 05:17:51 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-26468/ In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07168125; Issue ID: ALPS07168125.

The post CVE-2022-26468 appeared first on CVE Vulnerability.

]]> In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07168125; Issue ID: ALPS07168125.

The post CVE-2022-26468 appeared first on CVE Vulnerability.

]]> CVE-2022-26447 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-26447/ Thu, 23 Feb 2023 05:17:51 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-26447/ In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784478; Issue ID: ALPS06784478.

The post CVE-2022-26447 appeared first on CVE Vulnerability.

]]> In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784478; Issue ID: ALPS06784478.

The post CVE-2022-26447 appeared first on CVE Vulnerability.

]]> CVE-2022-26428 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-26428/ Thu, 23 Feb 2023 05:17:50 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-26428/ In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260.

The post CVE-2022-26428 appeared first on CVE Vulnerability.

]]> In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260.

The post CVE-2022-26428 appeared first on CVE Vulnerability.

]]> CVE-2022-21776 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-21776/ Thu, 23 Feb 2023 05:02:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-21776/ In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450.

The post CVE-2022-21776 appeared first on CVE Vulnerability.

]]> In MDP, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06545450; Issue ID: ALPS06545450.

The post CVE-2022-21776 appeared first on CVE Vulnerability.

]]> CVE-2022-20089 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-20089/ Thu, 23 Feb 2023 05:02:15 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-20089/ In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06240397; Issue ID: ALPS06240397.

The post CVE-2022-20089 appeared first on CVE Vulnerability.

]]> In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06240397; Issue ID: ALPS06240397.

The post CVE-2022-20089 appeared first on CVE Vulnerability.

]]> CVE-2022-20088 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-20088/ Thu, 23 Feb 2023 05:02:15 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-20088/ In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; Issue ID: ALPS06209201.

The post CVE-2022-20088 appeared first on CVE Vulnerability.

]]> In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; Issue ID: ALPS06209201.

The post CVE-2022-20088 appeared first on CVE Vulnerability.

]]>