deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31014
Published: 2022-07-05
Description: Nextcloud server is an open source personal cloud server. Affected versions were found to be vulnerable to SMTP command injection. The impact varies based on which commands are supported by the backend SMTP server. However, the main risk here is that the attacker can then hijack an already-authenticated SMTP session and run arbitrary SMTP commands as the email user, such as sending emails to other users, changing the FROM user, and so on. As before, this depends on the configuration of the server itself, but newlines should be sanitized to mitigate such arbitrary SMTP command injection. It is recommended that the Nextcloud Server is upgraded to 22.2.8 , 23.0.5 or 24.0.1. There are no known workarounds for this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74, CWE-93, CWE-74
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-264h-3v4w-6xh2; https://github.com/nextcloud/server/pull/32428; https://hackerone.com/reports/1516377
CVE: CVE-2022-31116
Published: 2022-07-05
Description: UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly. Besides corrupting strings, this allowed for potential key confusion and value overwriting in dictionaries. All users parsing JSON from untrusted sources are vulnerable. From version 5.4.0, UltraJSON decodes lone surrogates in the same way as the standard library's `json` module does, preserving them in the parsed output. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://github.com/ultrajson/ultrajson/commit/67ec[PII_REDACTED]9d602e0fcf7bb1ff3e19272687; https://github.com/ultrajson/ultrajson/security/advisories/GHSA-wpqr-jcpx-745r; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NAU5N4A7EUK2AMUCOLYDD5ARXAJYZBD2/
CVE: CVE-2022-31117
Published: 2022-07-05
Description: UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. This issue has been resolved in version 5.4.0 and all users should upgrade to UltraJSON 5.4.0. There are no known workarounds for this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-415
References: https://github.com/ultrajson/ultrajson/commit/9c20de0f77b391093967e25d01fb48671104b15b; https://github.com/ultrajson/ultrajson/security/advisories/GHSA-fm67-cv37-96ff; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NAU5N4A7EUK2AMUCOLYDD5ARXAJYZBD2/
CVE: CVE-2022-33075
Published: 2022-07-05
Description: A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://sourcecodester.com; http://zoo.com; https://packetstormsecurity.com/files/167603/Zoo-Management-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2022-2321
Published: 2022-07-05
Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://github.com/heroiclabs/nakama/commit/e2e02fce80ff33ce45f8a6ebc0b7a99ee0b03824; https://huntr.dev/bounties/3055b3f5-6b80-4d47-8e00-3500dfb458bc; https://github.com/heroiclabs/nakama/commit/e2e02fce80ff33ce45f8a6ebc0b7a99ee0b03824
CVE: CVE-2022-31856
Published: 2022-07-05
Description: Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter at /index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/50942; https://www.exploit-db.com/exploits/50942
CVE: CVE-2022-32310
Published: 2022-07-05
Description: An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://packetstormsecurity.com/files/167291/Ingredient-Stock-Management-System-1.0-Account-Takeover.html; https://packetstormsecurity.com/files/167291/Ingredient-Stock-Management-System-1.0-Account-Takeover.html
CVE: CVE-2022-32311
Published: 2022-07-05
Description: Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/view_stock.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/167290/Ingredient-Stock-Management-System-1.0-SQL-Injection.html; https://packetstormsecurity.com/files/167290/Ingredient-Stock-Management-System-1.0-SQL-Injection.html
CVE: CVE-2022-32413
Published: 2022-07-05
Description: An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/bihell/Dice/issues/157; https://github.com/bihell/Dice/issues/157
CVE: CVE-2022-34972
Published: 2022-07-05
Description: So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the att_value_id , manu_value_id , opt_value_id , and subcate_value_id parameters at /index.php?route=extension/module/so_filter_shop_by/filter_data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/167605/OpenCart-3.x-So-Filter-Shop-By-SQL-Injection.html; https://packetstormsecurity.com/files/167605/OpenCart-3.x-So-Filter-Shop-By-SQL-Injection.html
CVE: CVE-2022-22681
Published: 2022-07-06
Description: Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors.
CVSS Score: 8.1 (HIGH)
CWE: CWE-384
References: https://www.synology.com/security/advisory/Synology_SA_21_26; https://www.synology.com/security/advisory/Synology_SA_21_26
CVE: CVE-2021-23163
Published: 2022-07-06
Description: JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.33.6 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.
CVSS Score: 3.1 (LOW)
CWE: CWE-352, CWE-352
References: https://www.jfrog.com/confluence/display/JFROG/CVE-2021-23163%3A++Cross-Site+Request+Forgery+on+REST+using+Basic+Auth; https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories; https://www.jfrog.com/confluence/display/JFROG/CVE-2021-23163%3A++Cross-Site+Request+Forgery+on+REST+using+Basic+Auth
CVE: CVE-2021-45721
Published: 2022-07-06
Description: JFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site Scripting (XSS) through one of the XHR parameters in Users REST API endpoint. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.36.1 versions prior to 7.29.8; JFrog Artifactory versions before 6.23.41 versions prior to 6.23.38.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45721%3A+Cross-Site+Script+%28XSS%29+on+User+REST+API; https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories; https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45721%3A+Cross-Site+Script+%28XSS%29+on+User+REST+API
CVE: CVE-2021-46687
Published: 2022-07-06
Description: JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-359, CWE-668
References: https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46687%3A+Sensitive+data+exposure+on+proxy+endpoint+for+Project+Admin; https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories; https://www.jfrog.com/confluence/display/JFROG/CVE-2021-46687%3A+Sensitive+data+exposure+on+proxy+endpoint+for+Project+Admin
CVE: CVE-2022-32533
Published: 2022-07-06
Description: Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a dormant project of Apache Portals and no updates will be provided for this issue
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2022/07/06/1; https://lists.apache.org/thread/d3g248pr03x8rvmh8p2t3xdlw0wn5dz2; https://www.openwall.com/lists/oss-security/2022/07/06/1
CVE: CVE-2022-35229
Published: 2022-07-06
Description: An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
CVSS Score: 3.7 (LOW)
CWE: CWE-79, CWE-79
References: https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html; https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html; https://support.zabbix.com/browse/ZBX-21306
CVE: CVE-2022-35230
Published: 2022-07-06
Description: An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
CVSS Score: 3.7 (LOW)
CWE: CWE-79, CWE-79
References: https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html; https://support.zabbix.com/browse/ZBX-21305; https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html
CVE: CVE-2022-30591
Published: 2022-07-06
Description: quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtu_discoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the vendor's position is that this behavior should not be listed as a vulnerability on the CVE List
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/lucas-clemente/quic-go/blob/84e03e59760ceee[PII_REDACTED]1bb0688fcc4e98f/mtu_discoverer.go; https://github.com/lucas-clemente/quic-go/blob/84e03e59760ceee[PII_REDACTED]1bb0688fcc4e98f/mtu_discoverer.go
CVE: CVE-2022-32290
Published: 2022-07-06
Description: The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead of only the localhost interface. Therefore, any client on the same network can connect to this TCP port and send HTTP requests. The Mender Client will forward these requests to the Mender Server. Additionally, if mTLS is set up, the Mender Client will connect to the Mender Server using the device's client certificate, making it possible for the attacker to bypass mTLS authentication and send requests to the Mender Server without direct access to the client certificate and related private key. Accessing the HTTP proxy from the local network doesn't represent a direct threat, because it doesn't expose any device or server-specific data. However, it increases the attack surface and can be a potential vector to exploit other vulnerabilities both on the Client and the Server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://mender.io/blog/cve-2022-32290-mender-client-listening-on-all-the-interfaces; https://northern.tech; https://mender.io/blog/cve-2022-32290-mender-client-listening-on-all-the-interfaces
CVE: CVE-2022-32383
Published: 2022-07-06
Description: Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://drive.google.com/file/d/1M18rn2N7GzmBRI770S07IbbzmvX-5IPe/view?usp=sharing; https://github.com/LuGakki/Vuln/blob/main/Tenda%20AC23.pdf; https://drive.google.com/file/d/1M18rn2N7GzmBRI770S07IbbzmvX-5IPe/view?usp=sharing
CVE: CVE-2022-32385
Published: 2022-07-06
Description: Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://ac23.com; http://tenda.com; https://drive.google.com/file/d/1wyc9CBd3NW2bFbRhGcAaHEYJK1G2a21Y/view?usp=sharing
CVE: CVE-2022-32386
Published: 2022-07-06
Description: Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://ac23.com; http://tenda.com; https://drive.google.com/file/d/1XPTEt10yJt9WcLrIt6YpDV5OlP-U6dBR/view?usp=sharing
CVE: CVE-2021-31676
Published: 2022-07-06
Description: A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/RO6OTXX/pescms_vulnerability; https://github.com/lazyphp/PESCMS-TEAM/issues/7; https://github.com/two-kisses/pescms_vulnerability%2C
CVE: CVE-2021-31677
Published: 2022-07-06
Description: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/RO6OTXX/pescms_vulnerability; https://github.com/lazyphp/PESCMS-TEAM/issues/7%2C; https://github.com/two-kisses/pescms_vulnerability%2C
CVE: CVE-2021-31678
Published: 2022-07-06
Description: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/RO6OTXX/pescms_vulnerability; https://github.com/lazyphp/PESCMS-TEAM/issues/7; https://github.com/two-kisses/pescms_vulnerability
CVE: CVE-2021-31679
Published: 2022-07-06
Description: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/RO6OTXX/pescms_vulnerability; https://github.com/lazyphp/PESCMS-TEAM/issues/7; https://github.com/two-kisses/pescms_vulnerability%2C
CVE: CVE-2021-37839
Published: 2022-07-06
Description: Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-273, CWE-273
References: https://lists.apache.org/thread/pwqyxxmn5gh7cnw3qsp66v0lt4xojt82; https://lists.apache.org/thread/pwqyxxmn5gh7cnw3qsp66v0lt4xojt82
CVE: CVE-2022-24138
Published: 2022-07-06
Description: IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx" permissions for unprivileged users. Low privilege users can use SetOpLock to wait for CreateProcess and switch the genuine component with a malicious executable thus gaining code execution as a high privilege user (Low Privilege -> high integrity ADMIN).
CVSS Score: 7.8 (HIGH)
CWE: CWE-552
References: http://advanced.com; http://iobit.com; https://github.com/tomerpeled92/CVE/
CVE: CVE-2022-24139
Published: 2022-07-06
Description: In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with the same name as one of ASCService's named pipes. ASCService first tries to connect before trying to create the named pipes, because of that during login the service will try to connect to the attacker which will lead to either escalation of privileges (through token manipulation and ImpersonateNamedPipeClient() ) from ADMIN -> SYSTEM or from Local ADMIN-> Domain ADMIN depending on the user and named pipe that is used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: http://advanced.com; http://iobit.com; https://github.com/tomerpeled92/CVE/
CVE: CVE-2022-24140
Published: 2022-07-06
Description: IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a config file. After downloading the config file, the products will parse the HTTP location of the update from the file and will try to install the update automatically with ADMIN privileges. An attacker Intercepting this communication can supply the product a fake config file with malicious locations for the updates thus gaining a remote code execution on an endpoint.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-494
References: http://advanced.com; http://iobit.com; https://github.com/tomerpeled92/CVE/
CVE: CVE-2022-24141
Published: 2022-07-06
Description: The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacker that opened a named pipe with the same name can use it to gain the token of another user by listening for connections and abusing ImpersonateNamedPipeClient().
CVSS Score: 5.4 (MEDIUM)
References: http://iobit.com; http://itop.com; https://github.com/tomerpeled92/CVE/
CVE: CVE-2022-28935
Published: 2022-07-06
Description: Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2cu.5050_B20200504, Totolink A950RG V4.1.2cu.5161_B20200903, Totolink A800R V4.1.2cu.5137_B20200730, Totolink A3000RU V5.9c.5185_B20201128, Totolink A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://drive.google.com/drive/folders/1JNX74lNgC3U9pnrcNlGo0hsDGZzF6h7F; https://drive.google.com/drive/folders/1JNX74lNgC3U9pnrcNlGo0hsDGZzF6h7F?usp=sharing; https://drive.google.com/drive/folders/1JNX74lNgC3U9pnrcNlGo0hsDGZzF6h7F
CVE: CVE-2022-33980
Published: 2022-07-06
Description: Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2022/07/06/5; http://www.openwall.com/lists/oss-security/2022/11/15/4; https://lists.apache.org/thread/tdf5n7j80lfxdhs2764vn0xmpfodm87s
CVE: CVE-2022-20082
Published: 2022-07-06
Description: In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; Issue ID: ALPS07044730.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-20083
Published: 2022-07-06
Description: In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00803883; Issue ID: MOLY00803883.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21744
Published: 2022-07-06
Description: In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00810064; Issue ID: ALPS06641626.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21763
Published: 2022-07-06
Description: In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044717; Issue ID: ALPS07044708.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21764
Published: 2022-07-06
Description: In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044717; Issue ID: ALPS07044717.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21765
Published: 2022-07-06
Description: In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641673.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21766
Published: 2022-07-06
Description: In CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06641673; Issue ID: ALPS06641653.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022
CVE: CVE-2022-21767
Published: 2022-07-06
Description: In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784430; Issue ID: ALPS06784430.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2022; https://corp.mediatek.com/product-security-bulletin/July-2022