Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-1999 State: PUBLISHED Published: 2024-04-09T18:59:15.564Z Last Updated: 2024-08-01T18:56:22.554Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: britner Products: Gutenberg Blocks by Kadence Blocks – Page Builder Features Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Widget's anchor style parameter in all versions up to, and including, 3.2.25 due to insufficient input sanitization and output escaping. This makes it possible for a
ns up to, and including, 3.2.25 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b5fd4dbe-6f44-45ef-9d49-4bc624fdcc57?source=cve - https://plugins.trac.wordpress.org/browser/kadence-blocks/tags/3.2.25/includes/blocks/class-kadence-blocks-testimonial-block.php#L88 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=30474
locks-testimonial-block.php#L88 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3047463%40kadence-blocks%2Ftrunk&old=3042198%40kadence-blocks%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-20001 State: PUBLISHED Published: 2024-02-05T05:59:41.091Z Last Updated: 2025-05-15T19:47:41.054Z Vendors: MediaTek, Inc. Products: MT5583, MT5586, MT5691, MT5695, MT5696, MT9010, MT9011, MT9012, MT9015, MT9016, MT9020, MT9021, MT9022, MT9025, MT9026, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9603, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9633, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9660, MT9666, MT9667, MT9669, MT9671, MT9675, MT9679, MT9685, MT9686, MT9688, MT9689 Problem Types: Elevation of Privilege Description: In TVAPI, there is a possible out of
MT9685, MT9686, MT9688, MT9689 Problem Types: Elevation of Privilege Description: In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961601; Issue ID: DTV03961601. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20002 State: PUBLISHED Published: 2024-02-05T05:59:42.613Z Last Updated: 2025-06-17T13:34:19.277Z Vendors: MediaTek, Inc. Products: MT5583, MT5586, MT5691, MT5695, MT5696, MT9010, MT9011, MT9012, MT9015, MT9016, MT9020, MT9021, MT9022, MT9025, MT9026, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9286, MT9288, MT9602, MT9603, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9618, MT9629, MT9630, MT9631, MT9632, MT9633, MT9636, MT9638, MT9639, MT9649, MT9650, MT9652, MT9653, MT9660, MT9666, MT9667, MT9669, MT9671, MT9675, MT9679, MT9685, MT9686, MT9688, MT9689 Problem Types: Elevation of Privilege Description: In TVAPI, there is a possible out of
MT9685, MT9686, MT9688, MT9689 Problem Types: Elevation of Privilege Description: In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961715; Issue ID: DTV03961715. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20003 State: PUBLISHED Published: 2024-02-05T05:59:33.841Z Last Updated: 2024-08-01T21:52:31.519Z Vendors: MediaTek, Inc. Products: MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8791, MT8791T, MT8797 Problem Types: Denial of Service Description: In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01191612 (MSV-981). Addition
ded. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01191612 (MSV-981). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20004 State: PUBLISHED Published: 2024-02-05T05:59:44.132Z Last Updated: 2024-08-01T21:52:31.756Z Vendors: MediaTek, Inc. Products: MT2735, MT6297, MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8675, MT8791, MT8791T, MT8797 Problem Types: Denial of Service Description: In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01195812 (MSV-985). Addition
ded. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01195812 (MSV-985). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20005 State: PUBLISHED Published: 2024-03-04T02:43:29.245Z Last Updated: 2024-08-06T15:01:36.270Z Vendors: MediaTek, Inc. Products: MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8676, MT8678 Problem Types: Elevation of Privilege Description: In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed f
is could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID: ALPS08355599. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2024
CVE ID: CVE-2024-20006 State: PUBLISHED Published: 2024-02-05T05:59:26.595Z Last Updated: 2024-08-01T21:52:31.641Z Vendors: MediaTek, Inc. Products: MT2713, MT6781, MT6880, MT6890, MT8188T Problem Types: Elevation of Privilege Description: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08477148; Issue ID: ALPS08477148. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20007 State: PUBLISHED Published: 2024-02-05T05:59:28.064Z Last Updated: 2025-05-15T19:47:50.386Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6895, MT6983, MT6985, MT8321, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: AL
n of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20009 State: PUBLISHED Published: 2024-02-05T05:59:29.526Z Last Updated: 2025-06-20T20:07:49.293Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6761, MT6762, MT6765, MT6779, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6895, MT6983, MT6985, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8185, MT8188, MT8188T Problem Types: Elevation of Privilege Description: In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation
mote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441150; Issue ID: ALPS08441150. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20010 State: PUBLISHED Published: 2024-02-05T05:59:30.948Z Last Updated: 2025-04-17T15:33:06.702Z Vendors: MediaTek, Inc. Products: MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In keyInstall, there is a possible esc
T8791, MT8791T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358560; Issue ID: ALPS08358560. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20011 State: PUBLISHED Published: 2024-02-05T05:59:32.380Z Last Updated: 2025-06-20T20:08:41.858Z Vendors: MediaTek, Inc. Products: MT6985, MT8127, MT8135, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8188, MT8188T, MT8195, MT8195Z, MT8312C, MT8312D Problem Types: Remote Code Execution Description: In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441146; Issue ID: ALPS08441146. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
ALPS08441146; Issue ID: ALPS08441146. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20012 State: PUBLISHED Published: 2024-02-05T05:59:35.241Z Last Updated: 2025-05-09T16:35:33.691Z Vendors: MediaTek, Inc. Products: MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6895, MT6983, MT6985, MT8321, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In keyInstall, there is a possible escalation of privilege due to type confusion. This could l
of Privilege Description: In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358566; Issue ID: ALPS08358566. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20013 State: PUBLISHED Published: 2024-02-05T05:59:36.678Z Last Updated: 2025-06-20T20:09:28.305Z Vendors: MediaTek, Inc. Products: MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In keyInstall, there is a possible out
T8791, MT8791T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08471742; Issue ID: ALPS08308608. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20015 State: PUBLISHED Published: 2024-02-05T05:59:38.166Z Last Updated: 2024-08-01T21:52:31.653Z Vendors: MediaTek, Inc. Products: MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6781, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8321, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User
ermissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441419; Issue ID: ALPS08441419. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20016 State: PUBLISHED Published: 2024-02-05T05:59:39.607Z Last Updated: 2024-08-01T21:52:31.740Z Vendors: MediaTek, Inc. Products: MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8183, MT8188, MT8195, MT8765, MT8766, MT8768, MT8791, MT8797, MT8798 Problem Types: Denial of Service Description: In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation Patch ID: ALPS07835901; Is
vice with System execution privileges needed. User interaction is not needed for exploitation Patch ID: ALPS07835901; Issue ID: ALPS07835901. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/February-2024
CVE ID: CVE-2024-20017 State: PUBLISHED Published: 2024-03-04T02:43:22.997Z Last Updated: 2024-09-25T03:55:42.993Z Vendors: MediaTek, Inc. Products: MT6890, MT7915, MT7916, MT7981, MT7986 Problem Types: Elevation of Privilege Description: In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation Patch ID: WCNCR00350938; Issue ID: MSV-1132. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2024
CVE ID: CVE-2024-20018 State: PUBLISHED Published: 2024-03-04T02:43:26.082Z Last Updated: 2025-03-27T14:48:29.465Z Vendors: MediaTek, Inc. Products: MT7615 Problem Types: Elevation of Privilege Description: In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00348479; Issue ID: MSV-1019. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2024
CVE ID: CVE-2024-20019 State: PUBLISHED Published: 2024-03-04T02:43:27.661Z Last Updated: 2024-08-01T21:52:31.569Z Vendors: MediaTek, Inc. Products: MT7925, MT7927 Problem Types: Denial of Service Description: In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00351241; Issue ID: MSV-1173. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/March-2024
CVE ID: CVE-2024-20020 State: PUBLISHED Published: 2024-03-04T02:43:24.572Z Last Updated: 2025-03-28T19:10:14.806Z Vendors: MediaTek, Inc. Products: MT2713, MT2715, MT8173, MT8188, MT8195, MT8390, MT8395 Problem Types: Information Disclosure Description: In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ID: ALPS08522504. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/March-2024
CVE ID: CVE-2024-20021 State: PUBLISHED Published: 2024-05-06T02:52:01.865Z Last Updated: 2024-08-01T21:52:31.733Z Vendors: MediaTek, Inc. Products: MT6768, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8168, MT8183, MT8188, MT8188T, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8675, MT8675, MT8676, MT8678, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8781, MT8786, MT8788, MT8788T, MT8788, MT8788X, MT8788Z, MT8792, MT8795T, MT8796, MT8798 Problem Types: CWE-269 Description: In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead t
: In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/May-2024
CVE ID: CVE-2024-20022 State: PUBLISHED Published: 2024-03-04T02:43:30.832Z Last Updated: 2025-03-13T13:56:39.896Z Vendors: MediaTek, Inc. Products: MT2737, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8321, MT8385, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8796, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08
m execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2024
CVE ID: CVE-2024-20023 State: PUBLISHED Published: 2024-03-04T02:43:32.414Z Last Updated: 2024-08-25T15:17:44.836Z Vendors: MediaTek, Inc. Products: MT2713, MT2737, MT6781, MT6789, MT6835, MT6855, MT6879, MT6880, MT6886, MT6890, MT6895, MT6980, MT6983, MT6985, MT6989, MT6990, MT8188, MT8188T, MT8370, MT8390, MT8673, MT8676, MT8678 Problem Types: Elevation of Privilege Description: In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638. Additional Analyst Notes: - CVE Program Container:
ed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2024
CVE ID: CVE-2024-20024 State: PUBLISHED Published: 2024-03-04T02:43:34.025Z Last Updated: 2024-08-01T21:52:31.575Z Vendors: MediaTek, Inc. Products: MT6781, MT6789, MT6833, MT6835, MT6879, MT6886, MT6895, MT6983, MT6985, MT6989, MT8666, MT8666A, MT8666B, MT8667, MT8673, MT8676, MT8678 Problem Types: Elevation of Privilege Description: In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: ALPS08541635. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://
sue ID: ALPS08541635. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/March-2024
CVE ID: CVE-2024-20025 State: PUBLISHED Published: 2024-03-04T02:43:35.600Z Last Updated: 2024-08-26T20:56:23.653Z Vendors: MediaTek, Inc. Products: MT6739, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8168, MT8173, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8673, MT8678, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8796, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User i
to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; Issue ID: ALPS08541686. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/March-2024