Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-20636 2 Google, Mediatek 45 Android, Mt6580, Mt6739 and 42 more 2025-03-19 6.7 Medium
In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09403554; Issue ID: MSV-2431.
CVE-2023-32873 2 Google, Mediatek 25 Android, Mt6761, Mt6765 and 22 more 2025-03-13 6.4 Medium
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08583919; Issue ID: ALPS08304227.
CVE-2024-20088 2 Google, Mediatek 29 Android, Mt6765, Mt6768 and 26 more 2025-03-13 4.4 Medium
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08932099; Issue ID: MSV-1543.