Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rchives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/ - https://security.netapp.com/advisory/ntap-20220923-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY/
CVE ID: CVE-2022-1997 State: PUBLISHED Published: 2022-06-06T10:10:10 Last Updated: 2024-08-03T00:24:44.189Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L) Vendors: francoisjacquet Products: francoisjacquet/rosariosis Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/28861ae9-7b09-45b7-a003-eccf903db71d - https://github.com/francoisjacquet/rosariosis/commit/6b22c0b5b40fad891c8cf9e7eeff3e42a35c0bf8
CVE ID: CVE-2022-1998 State: PUBLISHED Published: 2022-06-09T14:46:48 Last Updated: 2024-08-03T00:24:43.591Z Vendors: n/a Products: Kernel Problem Types: CWE-416 Description: A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/notify/fanotify/fanotify_user.c?h=v5.17&id=ee12595147ac1fbfb5bcb23837e26dd58d94b15d - https://seclists.
ux.git/commit/fs/notify/fanotify/fanotify_user.c?h=v5.17&id=ee12595147ac1fbfb5bcb23837e26dd58d94b15d - https://seclists.org/oss-sec/2022/q1/99 - https://security.netapp.com/advisory/ntap-20220707-0009/
CVE ID: CVE-2022-1999 State: PUBLISHED Published: 2022-07-01T16:06:59 Last Updated: 2024-08-03T00:24:43.699Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. Under certain conditions, using the REST API an unprivileged user was able to change labels description. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/357963 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-
ces: - https://gitlab.com/gitlab-org/gitlab/-/issues/357963 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1999.json
CVE ID: CVE-2022-20001 State: PUBLISHED Published: 2022-03-14T00:00:00.000Z Last Updated: 2025-04-23T18:54:25.700Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: fish-shell Products: fish-shell Problem Types: CWE-74 Description: fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository configuration that change the behavior of git, including running arbitrary commands. When using the default configuration of fish, changing to a directory automatically runs `git` commands in order to display information about the current repository in the prompt. If an attacker
atically runs `git` commands in order to display information about the current repository in the prompt. If an attacker can convince a user to change their current directory into one controlled by the attacker, such as on a shared file system or extracted archive, fish will run arbitrary commands under the attacker's control. This problem has been fixed in fish 3.4.0. Note that running git in these directories, including using the git tab completion, remains a potential trigger for this issue. As a workaround, remove the `fish_git_prompt` function from the prompt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fish-shell/fish-shel
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fish-shell/fish-shell/security/advisories/GHSA-pj5f-6vxj-f5mq - https://github.com/fish-shell/fish-shell/pull/8589 - https://github.com/fish-shell/fish-shell/releases/tag/3.4.0 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRNMYS2LKB6TKOOBQQRSRQICDMWLZ4QL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPZ7JV22DSZB5LNUCUEJ2HO3PKM2TVVK/ - https://www.debian.org/security/2022/dsa-5234 - https://security.gentoo.org/glsa/202309-10
CVE ID: CVE-2022-20002 State: PUBLISHED Published: 2022-03-30T16:02:58 Last Updated: 2024-08-03T01:55:46.089Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In incfs, there is a possible way of mounting on arbitrary paths due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-198657657 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-12l
CVE ID: CVE-2022-20004 State: PUBLISHED Published: 2022-05-10T19:55:23 Last Updated: 2024-08-03T01:55:46.089Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-179699767 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2022-20005 State: PUBLISHED Published: 2022-05-10T19:55:44 Last Updated: 2024-08-03T01:55:46.255Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-219044664 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2022-20006 State: PUBLISHED Published: 2022-05-10T19:56:10 Last Updated: 2024-08-03T01:55:46.200Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. This could lead to local escalation of privilege if a Guest user is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-151095871 Additional Analyst Notes: - CVE Program Container: References: - https://sou
droid-12 Android-12LAndroid ID: A-151095871 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-06-01
CVE ID: CVE-2022-20007 State: PUBLISHED Published: 2022-05-10T19:56:30 Last Updated: 2024-08-03T01:55:46.214Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-211481342 Additional Analyst Notes: - CVE Program Container: References: - https
-11 Android-12 Android-12LAndroid ID: A-211481342 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2022-20008 State: PUBLISHED Published: 2022-05-10T19:56:49 Last Updated: 2024-08-03T01:55:46.136Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2
m kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2022-20009 State: PUBLISHED Published: 2022-05-10T19:57:10 Last Updated: 2024-08-03T01:55:46.200Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213172319References: Upstream kernel Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2022-20010 State: PUBLISHED Published: 2022-05-10T19:57:28 Last Updated: 2024-08-03T01:55:46.169Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213519176 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2022-20011 State: PUBLISHED Published: 2022-05-10T19:57:48 Last Updated: 2024-08-03T01:55:46.250Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-214999128 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-05-01
CVE ID: CVE-2022-20012 State: PUBLISHED Published: 2022-01-04T15:56:21 Last Updated: 2024-08-03T01:55:46.121Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6757, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8127, MT8163, MT8167, MT8168, MT8169, MT8173, MT8183, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8788 Problem Types: Elevation of Privilege Description: In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges neede
e to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05836478; Issue ID: ALPS05836478. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20013 State: PUBLISHED Published: 2022-01-04T15:56:28 Last Updated: 2024-08-03T01:55:46.177Z Vendors: MediaTek, Inc. Products: MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05837742. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bull
837742. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20014 State: PUBLISHED Published: 2022-01-04T15:56:34.000Z Last Updated: 2025-05-22T18:48:47.974Z Vendors: MediaTek, Inc. Products: MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8185, MT8385, MT8788, MT8789 Problem Types: Elevation of Privilege Description: In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05857308; Issue ID: ALPS05857308. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
7308; Issue ID: ALPS05857308. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20015 State: PUBLISHED Published: 2022-01-04T15:56:39 Last Updated: 2024-08-03T01:55:46.201Z Vendors: MediaTek, Inc. Products: MT6739, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8169 Problem Types: Information Disclosure Description: In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966. Additional Analyst Notes: -
interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20016 State: PUBLISHED Published: 2022-01-04T15:56:46 Last Updated: 2024-08-03T01:55:46.125Z Vendors: MediaTek, Inc. Products: MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862986; Issue ID: ALPS05862986. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bull
862986. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20017 State: PUBLISHED Published: 2022-02-09T22:05:38 Last Updated: 2024-08-03T01:55:46.124Z Vendors: MediaTek, Inc. Products: MT6765, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Information Disclosure Description: In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862991; Issue ID: ALPS05862991. Additional Analyst N
d. User interaction is not needed for exploitation. Patch ID: ALPS05862991; Issue ID: ALPS05862991. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/February-2022
CVE ID: CVE-2022-20018 State: PUBLISHED Published: 2022-01-04T15:56:51 Last Updated: 2024-08-03T01:55:46.209Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8167, MT8168, MT8173, MT8362A, MT8365 Problem Types: Information Disclosure Description: In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS058
n disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863018; Issue ID: ALPS05863018. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20019 State: PUBLISHED Published: 2022-01-04T15:56:57.000Z Last Updated: 2025-05-22T18:50:06.223Z Vendors: MediaTek, Inc. Products: MT6595, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, MT6755, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8768 Problem Types: Information Disclosure Description: In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privile
e due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917620; Issue ID: ALPS05917620. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20020 State: PUBLISHED Published: 2022-01-04T15:57:07 Last Updated: 2024-08-03T01:55:46.179Z Vendors: MediaTek, Inc. Products: MT6739, MT6768, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8168, MT8173, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Information Disclosure Description: In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05943906; Issue ID: ALPS05943906. Addit
rivileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05943906; Issue ID: ALPS05943906. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20021 State: PUBLISHED Published: 2022-01-04T15:57:13 Last Updated: 2024-08-03T01:55:46.202Z Vendors: MediaTek, Inc. Products: MT6580, MT6630, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6763, MT6771, MT7662T, MT7663, MT7668, MT8163, MT8167, MT8167S, MT8173, MT8183, MT8321, MT8362A, MT8362B, MT8385, MT8765, MT8788 Problem Types: Denial of Service Description: In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not ne
lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198513; Issue ID: ALPS06198513. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20022 State: PUBLISHED Published: 2022-01-04T15:57:18 Last Updated: 2024-08-03T01:55:46.393Z Vendors: MediaTek, Inc. Products: MT6580, MT6630, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6763, MT6771, MT7662T, MT7663, MT7668, MT8163, MT8167, MT8167S, MT8173, MT8183, MT8321, MT8362A, MT8362B, MT8385, MT8765, MT8788 Problem Types: Denial of Service Description: In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from a host with the same BD address as the currently connected BT host. This could lead to remote denial of service of bluetooth with no additional execution p
the currently connected BT host. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198578; Issue ID: ALPS06198578. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20023 State: PUBLISHED Published: 2022-01-04T15:57:24 Last Updated: 2024-08-03T01:55:46.190Z Vendors: MediaTek, Inc. Products: MT6580, MT6630, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6889, MT6893, MT7662T, MT7663, MT7668, MT7915, MT7920, MT7921, MT7922, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8195, MT8321, MT8362A, MT8362B, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Denial of Service Description: In Bluetooth, there is a possible applicati
MT8788, MT8789, MT8791, MT8797 Problem Types: Denial of Service Description: In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198608; Issue ID: ALPS06198608. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2022-20024 State: PUBLISHED Published: 2022-02-09T22:05:31 Last Updated: 2024-08-03T01:55:46.228Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6750, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT8167, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In system service, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219064; Issue ID: ALPS06219064. Add
privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219064; Issue ID: ALPS06219064. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/February-2022