Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-32565 State: PUBLISHED Published: 2022-06-13T22:15:23 Last Updated: 2024-08-03T07:46:44.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document ids. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32567 State: PUBLISHED Published: 2022-07-07T10:15:46 Last Updated: 2024-08-03T07:46:44.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.atlassian.com/apps/27136/jira-misc-custom-fields-jmcf?hosting=server&tab=overview - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-039.txt
CVE ID: CVE-2022-32569 State: PUBLISHED Published: 2022-11-11T15:48:51.816Z Last Updated: 2025-02-05T20:24:06.163Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC M15 Laptop Kits Problem Types: escalation of privilege Description: Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE ID: CVE-2022-32570 State: PUBLISHED Published: 2023-02-16T19:59:55.162Z Last Updated: 2025-01-27T18:22:28.199Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Quartus Prime Pro and Standard edition software Problem Types: escalation of privilege Description: Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html
CVE ID: CVE-2022-32571 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:34.592Z Description: No description available.
CVE ID: CVE-2022-32572 State: PUBLISHED Published: 2022-08-22T18:25:36.378Z Last Updated: 2025-04-15T18:51:01.854Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: WWBN Products: AVideo Problem Types: CWE-78 Description: An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa08
iner: - CISA ADP Vulnrichment: References: - https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sql - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1548
CVE ID: CVE-2022-32573 State: PUBLISHED Published: 2022-12-19T10:00:14.221Z Last Updated: 2025-04-15T18:38:37.249Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Lansweeper Products: lansweeper Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1528
CVE ID: CVE-2022-32574 State: PUBLISHED Published: 2022-10-25T16:33:41.178Z Last Updated: 2025-04-15T18:47:44.263Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-415 Description: A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tal
his vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1565
CVE ID: CVE-2022-32575 State: PUBLISHED Published: 2023-02-16T20:00:19.274Z Last Updated: 2025-01-27T18:15:51.455Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: escalation of privilege Description: Out-of-bounds write in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00733.html
CVE ID: CVE-2022-32576 State: PUBLISHED Published: 2023-05-10T13:17:16.117Z Last Updated: 2025-01-24T17:37:18.063Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Unite(R) Plugin SDK Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in the Intel(R) Unite(R) Plugin SDK before version 4.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00723.html
CVE ID: CVE-2022-32577 State: PUBLISHED Published: 2023-05-10T13:16:49.996Z Last Updated: 2025-01-27T18:08:11.338Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: n/a Products: Intel(R) NUC Kits Problem Types: information disclosure, denial of service, CWE-20 Description: Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
CVE ID: CVE-2022-32578 State: PUBLISHED Published: 2023-05-10T13:16:59.691Z Last Updated: 2025-01-27T18:04:47.773Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Pro Software Suite Problem Types: escalation of privilege, CWE-284 Description: Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00834.html
CVE ID: CVE-2022-32579 State: PUBLISHED Published: 2022-08-18T20:04:51.000Z Last Updated: 2025-02-10T20:09:14.465Z Vendors: n/a Products: Intel(R) NUC Laptop Kits Problem Types: escalation of privilege Description: Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE ID: CVE-2022-32580 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:35.781Z Description: No description available.
CVE ID: CVE-2022-32581 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:36.976Z Description: No description available.
CVE ID: CVE-2022-32582 State: PUBLISHED Published: 2023-05-10T13:16:48.845Z Last Updated: 2025-01-27T18:08:35.083Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element Problem Types: denial of service, CWE-284 Description: Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CI
d user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
CVE ID: CVE-2022-32583 State: PUBLISHED Published: 2022-08-18T07:14:00 Last Updated: 2024-08-03T07:46:43.647Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Authorization Description: Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007584.html - https://jvn.jp/en/jp/JVN20573662/index.html
CVE ID: CVE-2022-32584 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:19:38.171Z Description: No description available.
CVE ID: CVE-2022-32585 State: PUBLISHED Published: 2022-06-30T19:05:24.289Z Last Updated: 2025-04-15T19:00:08.664Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-489 Description: A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1570
CVE ID: CVE-2022-32586 State: PUBLISHED Published: 2022-10-25T16:33:42.143Z Last Updated: 2025-04-15T18:47:36.459Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: abode systems, inc. Products: iota All-In-One Security Kit Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
st to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1563
CVE ID: CVE-2022-32587 State: PUBLISHED Published: 2022-11-08T18:37:28.806Z Last Updated: 2025-02-20T19:54:52.017Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: CodeAndMore Products: WP Page Widget (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CodeAndMore WP Page Widget plugin <= 3.9 on WordPress leading to plugin settings change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-page-widget/wordpress-wp-page-widget-plugin-3-9-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/wp-pag
wordpress-wp-page-widget-plugin-3-9-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/wp-page-widget/
CVE ID: CVE-2022-32588 State: PUBLISHED Published: 2022-11-09T17:35:41.400Z Last Updated: 2025-04-15T18:40:30.265Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Accusoft Products: ImageGear Problem Types: CWE-119 Description: An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1544
CVE ID: CVE-2022-32589 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T07:46:43.617Z Vendors: MediaTek, Inc. Products: MT6761, MT6762, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT7663, MT7668, MT7902, MT7921, MT8167S, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8512A, MT8518, MT8532, MT8667, MT8766, MT8768, MT8786, MT8788, MT8789 Problem Types: Denial of Service Description: In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additional execution privilege
due to an improper resource release. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07030600; Issue ID: ALPS07030600. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/October-2022
CVE ID: CVE-2022-32590 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T07:46:43.623Z Vendors: MediaTek, Inc. Products: MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT7663, MT7668, MT7902, MT7921, MT8167S, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8512A, MT8518, MT8532, MT8667, MT8695, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789 Problem Types: Elevation of Privilege Description: In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System exe
ssible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07299425; Issue ID: ALPS07299425. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/October-2022
CVE ID: CVE-2022-32591 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T07:46:44.611Z Vendors: MediaTek, Inc. Products: MT6580, MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8321, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Denial of Service Description: In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation
remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07257259; Issue ID: ALPS07257259. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/October-2022
CVE ID: CVE-2022-32592 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T07:46:44.724Z Vendors: MediaTek, Inc. Products: MT6855, MT6879, MT6895, MT6983, MT8185, MT8321, MT8385, MT8518, MT8666, MT8675, MT8765, MT8768, MT8786, MT8788, MT8789 Problem Types: Elevation of Privilege Description: In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07139405; Issue ID: ALPS07139405. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulleti
405. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/October-2022
CVE ID: CVE-2022-32593 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T07:46:44.625Z Vendors: MediaTek, Inc. Products: MT6983 Problem Types: Elevation of Privilege Description: In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138493; Issue ID: ALPS07138493. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/October-2022
CVE ID: CVE-2022-32594 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T15:12:46.282Z Vendors: MediaTek, Inc. Products: MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0744
f privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446207; Issue ID: ALPS07446207. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/December-2022
CVE ID: CVE-2022-32595 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T20:09:38.068Z Vendors: MediaTek, Inc. Products: MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Information Disclosure Description: In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS074462
isclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/December-2022
CVE ID: CVE-2022-32596 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T15:11:50.177Z Vendors: MediaTek, Inc. Products: MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0744
f privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446213; Issue ID: ALPS07446213. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/December-2022
CVE ID: CVE-2022-32597 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T15:10:56.237Z Vendors: MediaTek, Inc. Products: MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0744
f privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446228; Issue ID: ALPS07446228. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/December-2022
CVE ID: CVE-2022-32598 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T15:10:10.546Z Vendors: MediaTek, Inc. Products: MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 Problem Types: Elevation of Privilege Description: In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0744
CVE ID: CVE-2022-32599 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-12T15:59:26.451Z Vendors: MediaTek, Inc. Products: MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789 Problem Types: Elevation of Privilege Description: In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege
In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07460390. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/April-2023
CVE ID: CVE-2022-32601 State: PUBLISHED Published: 2022-11-08T00:00:00.000Z Last Updated: 2025-05-01T18:46:55.639Z Vendors: MediaTek, Inc. Products: MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8321, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8795T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges neede