Not rated
CVE-2023-20781 In keyinstall, there is a possible memory corruption due to a missing bounds check
Description
In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017756; Issue ID: ALPS07905323.
Affected products and versions
Other CVEs of MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883...
The 18 CVEs of MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883... →
CVE-2024-20013
In keyInstall, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2024-20012
In keyInstall, there is a possible escalation of privilege due to type confusion
6.7
Medium
CVE-2024-20010
In keyInstall, there is a possible escalation of privilege due to type confusion
6.7
Medium
CVE-2023-32876
In keyInstall, there is a possible information disclosure due to a missing bounds check
4.4
Medium