Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2025-10238

Summary
Assigner-lenovo
Assigner Org ID-da227ddf-6e25-4b41-b023-0f976dcaca4b
Published At-10 Jun, 2026 | 14:11
Updated At-11 Jun, 2026 | 03:55
Rejected At-
Credits

During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
â–¼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:lenovo
Assigner Org ID:da227ddf-6e25-4b41-b023-0f976dcaca4b
Published At:10 Jun, 2026 | 14:11
Updated At:11 Jun, 2026 | 03:55
Rejected At:
â–¼CVE Numbering Authority (CNA)

During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).

Affected Products
Vendor
Lenovo Group LimitedLenovo
Product
X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.12 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.15 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before BIOS: 1.13 / ECFW: 1.09 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.40 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.11 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before UEFI BIOS V1.22/ECP V1.13 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.15 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.14 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.38 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.13 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.62/1.12 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.10 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.45 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.25 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.37 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.65/1.13 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.37 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.28 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.47 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.38 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before BIOS: 1.40 / ECFW: 1.09 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before BIOS: 1.61 / ECFW: 1.57 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.22 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.51 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E14 Gen 5 (Type 21JR, 21JS) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.29 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.23 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
ThinkPad R14 Gen 5 Type 21JM PRC BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.41 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.34 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.24 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.28 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.28 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.27 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.37 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.62/1.12 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 through 1.28 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.69 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.39 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X9-15 Gen 1 (Type 21Q6, 21Q7) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.17 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.21 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.14 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.24 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.27 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E16 Gen 3 (Type 21SR, 21SS) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.11 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.45/1.25 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.67 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.29 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.51 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P14s Gen 3 (Type 21J5, 21J6) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.63 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.76 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.48 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.44 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.25 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.31 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E14 Gen 4 (type 21E3, 21E4) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.34 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.32 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E15 Gen 4 (type 21ED 21EE) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.27 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
ThinkPad S2 Gen 7 Type 21BD BIOS
Default Status
unaffected
Versions
Affected
  • From 0 through 1.36 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.52 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.36 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.38/1.36 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.75 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E15 Gen 3 (Type 20YG, 20YH, 20YJ, 20YK) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.24 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.51 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.64 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.36 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.97 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.36 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.83 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.33 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
ThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOS
Default Status
unaffected
Versions
Affected
  • From 0 through 1.38 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.33 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.97 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.37 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.68 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 through 1.40 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E16 Gen 2 (Type 21MA, 21MB) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.21 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.17 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.73 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.21 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.10 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.08 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.69/1.21 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.34 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.37 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.37 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.34 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.57 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.41 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 2.05 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.66/1.55 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.87/1.32 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 2.01 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.85/1.26 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.55 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.53 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.45 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.21 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
E14 Gen 7 (Type 21T9, 21TA) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.11 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.17 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.10 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.06 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.14 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.17 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.26 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.18 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.21 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.16 (custom)
Vendor
Lenovo Group LimitedLenovo
Product
P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.18 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-787CWE-787: Out-of-bounds Write
Type: CWE
CWE ID: CWE-787
Description: CWE-787: Out-of-bounds Write
Metrics
VersionBase scoreBase severityVector
4.08.4HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3.16.7MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Version: 4.0
Base score: 8.4
Base severity: HIGH
Vector:
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Version: 3.1
Base score: 6.7
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Update to the version (or newer) as recommended in the advisory: https://support.lenovo.com/us/en/product_security/LEN-218282

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://support.lenovo.com/us/en/product_security/LEN-218282
vendor-advisory
Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-218282
Resource:
vendor-advisory
â–¼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Information is not available yet
â–¼National Vulnerability Database (NVD)
nvd.nist.gov
Source:psirt@lenovo.com
Published At:10 Jun, 2026 | 15:16
Updated At:10 Jun, 2026 | 19:43

During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.08.4HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary3.16.7MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Type: Secondary
Version: 4.0
Base score: 8.4
Base severity: HIGH
Vector:
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Primary
Version: 3.1
Base score: 6.7
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-787Secondarypsirt@lenovo.com
CWE ID: CWE-787
Type: Secondary
Source: psirt@lenovo.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://support.lenovo.com/us/en/product_security/LEN-218282psirt@lenovo.com
N/A
Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-218282
Source: psirt@lenovo.com
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

694Records found

CVE-2023-20632
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-07 Mar, 2023 | 00:00
Updated-05 Mar, 2025 | 21:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628506; Issue ID: ALPS07628506.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt8675mt6580mt8167mt6781mt6739mt6885mt6855mt6983mt6895mt6761mt8168mt6771mt6833mt6789mt6768mt6765mt6893mt6735mt6853mt6873mt6763mt6779mt6785mt8666androidMT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6885, MT6893, MT6895, MT6983, MT8167, MT8168, MT8666, MT8675
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20817
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 5.46%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:22
Updated-16 Oct, 2024 | 21:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453600; Issue ID: ALPS07453600.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6985mt6873mt6893mt6833mt6580mt6886mt6885mt6983mt6877mt6781mt6765mt6891mt6883mt6853mt6895mt6853tmt6739androidmt6875mt6761mt6889mt6768mt6779mt6879MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985android
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20615
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 3.15%
||
7 Day CHG~0.00%
Published-06 Feb, 2023 | 00:00
Updated-26 Mar, 2025 | 20:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629572; Issue ID: ALPS07629572.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6895mt6769mt8765mt6877mt6739mt6785mt6781mt6855mt8321mt6885mt6889mt6875mt6779mt8768mt8766mt6833mt6768mt6765androidmt6893mt8786mt8788mt8791mt6883mt6853mt8385mt6761mt6762mt6983mt8789mt6771mt6879mt8791tmt6789mt6891mt8797mt6873MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8321, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20751
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-06 Jun, 2023 | 12:11
Updated-07 Jan, 2025 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07825502; Issue ID: ALPS07825502.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt8175mt8168mt8167sandroidmt8362amt8365mt8167mt8195MT8167, MT8167S, MT8168, MT8175, MT8195, MT8362A, MT8365
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20816
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 5.18%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:22
Updated-22 Oct, 2024 | 15:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453589; Issue ID: ALPS07453589.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6985mt6873mt6893mt6833mt6580mt6886mt6885mt6983mt6877mt6781mt6765mt6891mt6883mt6853mt6895mt6853tmt6739androidmt6875mt6761mt6889mt6768mt6779mt6879MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985mt6855mt6985mt6873mt6893mt6833mt6580mt6886mt6885mt6983mt6877mt6781mt6765mt6891mt6883mt6853mt6895mt6853tmt6739androidmt6875mt6761mt6889mt6768mt6779mt6879
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20832
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 6.73%
||
7 Day CHG~0.00%
Published-04 Sep, 2023 | 02:27
Updated-04 Oct, 2024 | 15:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530.

Action-Not Available
Vendor-rdkcentralMediaTek Inc.Google LLCOpenWrtThe Linux Foundation
Product-mt6855mt6990mt8175mt6873mt6893mt2735mt6886mt6983mt8167mt6765mt6891mt6883mt6853topenwrtmt6835mt6880mt6769mt6761mt6875mt6889mt8362amt6768rdk-bmt6985mt6890mt8167smt6833mt6885yoctomt6877mt6762mt8365mt8195mt6853mt6980mt6895mt8168androidmt6779mt6879MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8175, MT8195, MT8362A, MT8365mt6855mt6990mt8175mt6873mt6893mt2735mt6886mt6983mt8167mt6765mt6891mt6883mt6853tmt6835mt6880mt6875mt6761mt6769mt6889mt8362amt6768mt6985mt6890mt8167smt6833mt6885mt6877mt6762mt8365mt8195mt6853mt6980mt6895mt8168androidmt6779mt6879
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20752
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-06 Jun, 2023 | 12:11
Updated-07 Jan, 2025 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826586; Issue ID: ALPS07826586.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt8175mt8168mt8167sandroidmt8362amt8365mt8167mt8195MT8167, MT8167S, MT8168, MT8175, MT8195, MT8362A, MT8365
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20701
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG-0.04%
Published-15 May, 2023 | 00:00
Updated-24 Jan, 2025 | 17:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6781mt6853tmt6855mt8789mt6889mt6893mt6833mt6762mt6769mt6765androidmt6877mt8195mt8768mt6879mt6768mt6785mt8786mt6873mt6891mt6853mt6789mt8788mt6883mt8797mt6875mt6885mt6779MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8768, MT8786, MT8788, MT8789, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-21071
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-24 Mar, 2023 | 00:00
Updated-20 Feb, 2025 | 15:45
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254028518References: N/A

Action-Not Available
Vendor-n/aGoogle LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20797
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.03% / 7.76%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:21
Updated-22 Oct, 2024 | 18:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629582; Issue ID: ALPS07629582.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6895mt6985mt8188androidmt6886mt8673mt6983mt8195mt6879MT6879, MT6886, MT6895, MT6983, MT6985, MT8188, MT8195, MT8673mt6895mt6985mt8188androidmt6886mt8673mt6983mt8195mt6879
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20753
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.04% / 12.09%
||
7 Day CHG~0.00%
Published-04 Jul, 2023 | 01:44
Updated-04 Dec, 2024 | 17:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07588667.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6757cdmt6879mt6873mt6893mt8675mt8765mt6580mt6886mt8788mt8791tmt6983mt8666mt6765mt6757cmt6891mt6737mt6883mt6853tmt6835mt6739mt6757mt8768mt8789mt6769mt6761mt6875mt6889mt8797mt8321mt6768mt8781mt8766mt8786mt6985mt6771mt8385mt6833mt6885mt8673mt6735mt6753mt6762mt6877mt6781mt6853mt6895mt6789androidmt6757chmt8185mt6779mt6785mt6731mt6763MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-21050
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-24 Mar, 2023 | 00:00
Updated-21 Feb, 2025 | 22:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244423702References: N/A

Action-Not Available
Vendor-n/aGoogle LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20809
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 2.91%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:21
Updated-22 Oct, 2024 | 20:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt9631mt9011mt9688mt9615mt9022mt9030mt9012mt5695mt9667mt9221mt9670mt9617mt9215mt9031mt9216mt9636mt9611mt9021mt5583mt9222mt9652mt9629mt9218mt9639mt9266mt9255mt9269mt9016mt9256mt9610mt9612mt9638mt9220mt9675mt9288mt9666mt9669mt9285mt9600mt9286mt9650mt9632mt9671mt9020mt9685mt9613mt9010mt9602mt9032androidmt9686mt9630mt5691MT5583, MT5691, MT5695, MT9010, MT9011, MT9012, MT9016, MT9020, MT9021, MT9022, MT9030, MT9031, MT9032, MT9215, MT9216, MT9218, MT9220, MT9221, MT9222, MT9255, MT9256, MT9266, MT9269, MT9285, MT9286, MT9288, MT9600, MT9602, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9629, MT9630, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9666, MT9667, MT9669, MT9670, MT9671, MT9675, MT9685, MT9686, MT9688mt9631mt9011mt9688mt9615mt9022mt9030mt9012mt5695mt9667mt9221mt9670mt9617mt9215mt9031mt9216mt9636mt9611mt9021mt5583mt9222mt9652mt9629mt9218mt9639mt9266mt9255mt9269mt9016mt9256mt9610mt9612mt9638mt9220mt9675mt9288mt9666mt9669mt9285mt9600mt9286mt9650mt9632mt9671mt9020mt9685mt9613mt9010mt9602mt9032androidmt9686mt9630mt5691
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20720
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 3.15%
||
7 Day CHG~0.00%
Published-15 May, 2023 | 00:00
Updated-24 Jan, 2025 | 15:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629586; Issue ID: ALPS07629586.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6895mt6983mt8673androidmt8195mt8167mt8168MT6895, MT6983, MT8167, MT8168, MT8195, MT8673
CWE ID-CWE-787
Out-of-bounds Write
CWE ID-CWE-20
Improper Input Validation
CVE-2023-21077
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.56%
||
7 Day CHG~0.00%
Published-24 Mar, 2023 | 00:00
Updated-20 Feb, 2025 | 15:40
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257289560References: N/A

Action-Not Available
Vendor-n/aGoogle LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-21236
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.03% / 8.44%
||
7 Day CHG~0.00%
Published-28 Jun, 2023 | 00:00
Updated-04 Dec, 2024 | 21:43
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-270148537References: N/A

Action-Not Available
Vendor-n/aGoogle LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20604
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-06 Feb, 2023 | 00:00
Updated-26 Mar, 2025 | 15:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6895mt6735mt6765mt6763mt6877androidmt6739mt6893mt6785mt6781mt6737mt6757mt6853mt6855mt6885mt6761mt8167mt6983mt6889mt6771mt6753mt6779mt8362amt6879mt6833mt6873mt6768MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167, MT8362A
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-21075
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.56%
||
7 Day CHG~0.00%
Published-24 Mar, 2023 | 00:00
Updated-20 Feb, 2025 | 15:42
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-261857862References: N/A

Action-Not Available
Vendor-n/aGoogle LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20807
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.03% / 7.76%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:21
Updated-15 Oct, 2024 | 19:54
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608433; Issue ID: ALPS07608433.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6895mt8188androidmt8395mt8673mt6983mt2713mt8195MT2713, MT6895, MT6983, MT8188, MT8195, MT8395, MT8673mt6895mt8188mt8395mt8673mt6983mt2713mt8195
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20837
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 6.73%
||
7 Day CHG~0.00%
Published-04 Sep, 2023 | 02:27
Updated-21 Oct, 2024 | 18:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07992786; Issue ID: ALPS07992786.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6873mt6893mt8385mt6833mt6885mt8788mt6877mt6781mt6853mt6789androidmt8789mt8797mt8185mt6779mt6785mt8781MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6885, MT6893, MT8185, MT8385, MT8781, MT8788, MT8789, MT8797mt8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-21161
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 6.63%
||
7 Day CHG~0.00%
Published-28 Jun, 2023 | 00:00
Updated-03 Dec, 2024 | 15:11
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-263783702References: N/A

Action-Not Available
Vendor-n/aGoogle LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20658
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-06 Apr, 2023 | 00:00
Updated-17 Mar, 2025 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07537393; Issue ID: ALPS07180396.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-androidmt8798mt6983mt8673mt6895mt8188mt8195mt8795tMT6895, MT6983, MT8188, MT8195, MT8673, MT8795T, MT8798
CWE ID-CWE-787
Out-of-bounds Write
CVE-2018-1635
Matching Score-4
Assigner-IBM Corporation
ShareView Details
Matching Score-4
Assigner-IBM Corporation
CVSS Score-8.2||HIGH
EPSS-0.07% / 22.04%
||
7 Day CHG-0.00%
Published-20 Aug, 2019 | 18:50
Updated-16 Sep, 2024 | 23:26
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144439.

Action-Not Available
Vendor-IBM Corporation
Product-informix_dynamic_serverInformix Dynamic Server Enterprise Edition
CWE ID-CWE-787
Out-of-bounds Write
CVE-2018-1636
Matching Score-4
Assigner-IBM Corporation
ShareView Details
Matching Score-4
Assigner-IBM Corporation
CVSS Score-8.2||HIGH
EPSS-0.07% / 22.04%
||
7 Day CHG-0.00%
Published-20 Aug, 2019 | 18:50
Updated-16 Sep, 2024 | 17:48
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force ID: 144441.

Action-Not Available
Vendor-IBM Corporation
Product-informix_dynamic_serverInformix Dynamic Server Enterprise Edition
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20804
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.03% / 7.76%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:21
Updated-22 Oct, 2024 | 16:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07199773; Issue ID: ALPS07326384.

Action-Not Available
Vendor-Google LLCMediaTek Inc.The Linux Foundation
Product-mt6895mt8188androidmt8395mt8673mt6983yoctomt8195mt2713mt6879MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT8673mt6895mt8188androidmt8395mt8673mt6983mt8195yoctomt2713mt6879
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20828
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 6.73%
||
7 Day CHG~0.00%
Published-04 Sep, 2023 | 02:27
Updated-10 Oct, 2024 | 16:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014144.

Action-Not Available
Vendor-rdkcentralMediaTek Inc.Google LLCOpenWrtThe Linux Foundation
Product-mt6855mt6990mt8175mt6873mt6893mt2735mt6886mt6983mt8167mt6765mt6891mt6883mt6853topenwrtmt6835mt6880mt6769mt6761mt6875mt6889mt8362amt6768rdk-bmt6985mt6890mt8167smt6833mt6885yoctomt6877mt6762mt8365mt6853mt6980mt6895mt8168androidmt6779mt6879MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8175, MT8362A, MT8365mt6855mt6990mt8175mt6873mt6893mt2735mt6886mt6983mt8167mt6765mt6891mt6883mt6853tmt6835mt6880mt6769mt6761mt6875mt6889mt8362amt6768mt6985mt6890mt8167smt6833mt6885mt6877mt6762mt8365mt6853mt6980mt6895mt8168androidmt6779mt6879
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-21052
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-24 Mar, 2023 | 00:00
Updated-24 Feb, 2025 | 17:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-259063189References: N/A

Action-Not Available
Vendor-n/aGoogle LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20815
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 5.46%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:22
Updated-22 Oct, 2024 | 15:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453587; Issue ID: ALPS07453587.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6985mt6873mt6893mt6833mt6580mt6886mt6885mt6983mt6877mt6781mt6765mt6891mt6883mt6853mt6895mt6853tmt6739androidmt6875mt6761mt6889mt6768mt6779mt6879MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985mt6855mt6985mt6873mt6893mt6833mt6580mt6886mt6885mt6983mt6877mt6781mt6765mt6891mt6883mt6853mt6895mt6853tmt6739androidmt6875mt6761mt6889mt6768mt6779mt6879
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20630
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-07 Mar, 2023 | 00:00
Updated-05 Mar, 2025 | 21:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628505; Issue ID: ALPS07628505.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt8675mt6580mt8167mt6781mt6739mt6885mt6855mt6983mt6895mt6761mt8168mt6771mt6833mt6789mt6768mt6765mt6893mt6735mt6853mt6873mt6763mt6779mt6785mt8666androidMT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6885, MT6893, MT6895, MT6983, MT8167, MT8168, MT8666, MT8675
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20749
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 3.15%
||
7 Day CHG-0.01%
Published-06 Jun, 2023 | 12:11
Updated-07 Jan, 2025 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780926; Issue ID: ALPS07780926.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt8175mt6985mt6893mt8765mt8786mt8167smt8385mt6886mt8788mt8673mt8791tmt6983mt8365mt8167mt8195mt6895mt8168mt6789mt6835mt8768androidmt8797mt8321mt8362amt8781mt8766mt6879MT6789, MT6835, MT6855, MT6879, MT6886, MT6893, MT6895, MT6983, MT6985, MT8167, MT8167S, MT8168, MT8175, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20739
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 3.15%
||
7 Day CHG-0.02%
Published-06 Jun, 2023 | 12:11
Updated-07 Jan, 2025 | 22:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559819; Issue ID: ALPS07559819.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6757cdmt6879mt6873mt6893mt8765mt6886mt8788mt8791tmt6983mt6765mt6757cmt6891mt6737mt6883mt6853tmt6835mt6739mt6757mt8768mt8789mt6769mt6761mt6875mt6889mt8797mt8321mt6768mt8781mt8766mt8786mt6985mt6771mt6833mt6885mt6735mt6753mt6762mt6877mt6781mt6853mt6895mt6789androidmt6757chmt6779mt6785mt6763MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8167, MT8168, MT8173, MT8185, MT8321, MT8365, MT8395, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20754
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.03% / 7.76%
||
7 Day CHG~0.00%
Published-04 Jul, 2023 | 01:44
Updated-04 Dec, 2024 | 17:20
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6757cdmt6879mt6873mt6893mt8765mt6580mt6886mt8788mt8791tmt6983mt8666mt6765mt6757cmt6891mt6737mt6883mt6853tmt6835mt6739mt6757mt8768mt8789mt6769mt6761mt6875mt6889mt8797mt8321mt6768mt8781mt8766mt8786mt6985mt6771mt8385mt6833mt6885mt6735mt6753mt6762mt6877mt6781mt6853mt8667mt6895mt6789androidmt6757chmt8185mt8791mt6779mt6785mt6731mt6763MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-21078
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.56%
||
7 Day CHG~0.00%
Published-24 Mar, 2023 | 00:00
Updated-21 Feb, 2025 | 17:48
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-254840211References: N/A

Action-Not Available
Vendor-n/aGoogle LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20653
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG-0.02%
Published-06 Apr, 2023 | 00:00
Updated-13 Feb, 2025 | 16:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628168; Issue ID: ALPS07589144.

Action-Not Available
Vendor-MediaTek Inc.Google LLC
Product-mt6769mt8788mt6853mt6891mt8192mt6895mt6983mt8871mt6757cdmt8185mt8786mt6889mt6873mt6737mt8766mt8765mt6739mt6833mt8891mt6765mt8385mt6883mt6753mt6789mt8771mt6785mt6735mt6731mt6855mt6877mt8781mt6771mt6580mt6853tmt8795tmt8321mt8667mt8789mt6779mt6762mt6885mt6757mt8666mt6768mt6781mt6879mt6893mt8768mt8675mt6763mt8791mt8791tandroidmt8797mt6757chmt6875mt8798mt6761mt8673mt6757cMT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8192, MT8321, MT8385, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8795T, MT8797, MT8798, MT8871, MT8891
CWE ID-CWE-787
Out-of-bounds Write
CVE-2022-26465
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-06 Sep, 2022 | 17:19
Updated-03 Aug, 2024 | 05:03
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558799; Issue ID: ALPS06558799.

Action-Not Available
Vendor-yoctoprojectGoogle LLCMediaTek Inc.
Product-mt6873mt6893mt6885mt8518mt6983yoctomt6877mt6781mt6853mt6883mt6895mt6853tmt8798androidmt6875mt8797mt6889mt8791mt6779mt8512amt6785mt6879MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8512A, MT8518, MT8791, MT8797, MT8798
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20761
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.03% / 7.76%
||
7 Day CHG~0.00%
Published-04 Jul, 2023 | 01:44
Updated-04 Dec, 2024 | 21:41
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6879mt6873mt6893mt8765mt6886mt8788mt8791tmt6983mt6765mt6891mt6883mt6853tmt6835mt6739mt8768mt8789mt6769mt6761mt6875mt6889mt8797mt8321mt6768mt8781mt8766mt8786mt6985mt6771mt6833mt6885mt6762mt6877mt6781mt6853mt6895mt6789androidmt8791mt6779mt6785mt6763MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20806
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.03% / 7.76%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:21
Updated-17 Oct, 2024 | 14:33
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07537437.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6895mt8188androidmt8395mt8673mt6983mt8195mt2713mt6879MT2713, MT6879, MT6895, MT6983, MT8188, MT8195, MT8395, MT8673mt6895mt8188mt8395mt8673mt6983mt8195mt2713mt6879
CWE ID-CWE-787
Out-of-bounds Write
CVE-2025-1122
Matching Score-4
Assigner-ChromeOS Project
ShareView Details
Matching Score-4
Assigner-ChromeOS Project
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 0.23%
||
7 Day CHG~0.00%
Published-15 Apr, 2025 | 19:51
Updated-06 Oct, 2025 | 16:56
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

Action-Not Available
Vendor-Google LLC
Product-chrome_oschromeChromeOS
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20696
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-15 May, 2023 | 00:00
Updated-23 Jan, 2025 | 22:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only).

Action-Not Available
Vendor-MediaTek Inc.Google LLCOpenWrt
Product-mt8791mt8766androidmt8185mt8789mt8321mt8667mt8788mt8365openwrtmt6890mt8666mt8385mt8797mt8167mt8195mt8175mt8675mt8768mt8673mt8781mt8786mt8791tmt6880mt8765mt8395MT6880, MT6890, MT8167, MT8175, MT8185, MT8195, MT8321, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20700
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.05% / 16.94%
||
7 Day CHG+0.02%
Published-15 May, 2023 | 00:00
Updated-23 Jan, 2025 | 22:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643304; Issue ID: ALPS07643304.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6779androidmt6891mt6879mt8789mt6877mt8788mt6883mt6885mt6762mt6769mt6889mt8797mt6781mt6768mt6833mt8195mt6893mt6765mt6785mt8768mt6875mt6789mt6853tmt8786mt6873mt6853MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8768, MT8786, MT8788, MT8789, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20695
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-15 May, 2023 | 00:00
Updated-23 Jan, 2025 | 22:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734012 / ALPS07874363 (For MT6880, MT6890, MT6980 and MT6990 only); Issue ID: ALPS07734012 / ALPS07874363 (For MT6880, MT6890, MT6980 and MT6990 only).

Action-Not Available
Vendor-MediaTek Inc.Google LLCOpenWrt
Product-mt8791mt8766androidmt8185mt6980mt8789mt6985mt8321mt8667mt8788mt8365openwrtmt8395mt6890mt8666mt8385mt6990mt8797mt8167mt8195mt8175mt8675mt8768mt8673mt6835mt8786mt8781mt8791tmt6880mt8765mt6886MT6835, MT6880, MT6886, MT6890, MT6980, MT6985, MT6990, MT8167, MT8175, MT8185, MT8195, MT8321, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20821
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 6.73%
||
7 Day CHG~0.00%
Published-04 Sep, 2023 | 02:27
Updated-11 Oct, 2024 | 21:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07937113; Issue ID: ALPS07937113.

Action-Not Available
Vendor-rdkcentralMediaTek Inc.Google LLCOpenWrtThe Linux Foundation
Product-mt6855mt6990mt8175mt6873mt6893mt8675mt2735mt8765mt6886mt8395mt8788mt8791tmt6983mt8666mt8167mt6891mt6883openwrtmt6835mt6880mt8768mt8789mt6875mt8797mt6889mt8321mt8362amt8781mt8766rdk-bmt8786mt6985mt6890mt8167smt8188mt8385mt6833mt6885mt8673yoctomt6877mt8365mt8195mt6853mt6980mt6895mt8168androidmt8185mt8791mt2713mt6879mt8173MT2713, MT2735, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6980, MT6983, MT6985, MT6990, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797mt6855mt6990mt8175mt6873mt6893mt8675mt2735mt8765mt6886mt8395mt8788mt8791tmt6983mt8666mt8167mt6891mt6883mt6835mt6880mt8768mt8789mt6875mt8797mt6889mt8321mt8362amt8781mt8766mt8786mt6985mt6890mt8167smt8188mt8385mt6833mt6885mt8673mt6877mt8365mt8195mt6853mt6980mt6895mt8168androidmt8185mt8791mt2713mt6879mt8173
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20666
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 3.15%
||
7 Day CHG~0.00%
Published-06 Apr, 2023 | 00:00
Updated-13 Feb, 2025 | 15:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310651; Issue ID: ALPS07292173.

Action-Not Available
Vendor-MediaTek Inc.Google LLC
Product-mt8195mt8795tmt6895mt6983androidmt6789mt8188mt8798mt6855mt8781mt8365MT6789, MT6855, MT6895, MT6983, MT8188, MT8195, MT8365, MT8781, MT8795T, MT8798
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20760
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.03% / 7.76%
||
7 Day CHG~0.00%
Published-04 Jul, 2023 | 01:44
Updated-26 Nov, 2024 | 18:59
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629578; Issue ID: ALPS07629578.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6879mt6895androidmt6983mt8195MT6879, MT6895, MT6983, MT8195mt6879mt6895mt6983mt8195
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20715
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG~0.00%
Published-06 Jun, 2023 | 12:11
Updated-07 Jan, 2025 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07796900; Issue ID: ALPS07796900.

Action-Not Available
Vendor-Linux Kernel Organization, IncGoogle LLCMediaTek Inc.The Linux Foundation
Product-mt6855mt8175mt8786mt8167smt8385mt8788mt8673mt8518mt6983mt7902yoctomt8365mt7663mt6895mt5521iot-yoctomt8168mt6789linux_kernelmt7921mt8768mt8789androidmt8797mt8362amt8791mt7668mt8532mt8781mt8766mt6879MT5221, MT6789, MT6855, MT6879, MT6895, MT6983, MT7663, MT7668, MT7902, MT7921, MT8167S, MT8168, MT8175, MT8362A, MT8365, MT8385, MT8518, MT8532, MT8673, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-21310
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 1.87%
||
7 Day CHG~0.00%
Published-30 Oct, 2023 | 16:56
Updated-02 Aug, 2024 | 09:36
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Action-Not Available
Vendor-Google LLC
Product-androidAndroid
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20670
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 3.15%
||
7 Day CHG~0.00%
Published-06 Apr, 2023 | 00:00
Updated-13 Feb, 2025 | 15:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648710; Issue ID: ALPS07648710.

Action-Not Available
Vendor-MediaTek Inc.Google LLC
Product-mt8788mt6853mt8871mt6895mt6983mt8786mt6889mt6873mt8766mt8891mt8765mt6833mt6739mt8167mt6765mt8385mt6883mt6789mt8771mt6785mt6877mt6855mt8781mt6580mt8195mt6853tmt8795tmt8188mt8321mt8789mt6779mt6885mt6879mt6768mt6781mt2715mt6893mt8768mt8675mt8791androidmt8797mt8696mt8798mt6761mt8365MT2715, MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8167, MT8188, MT8195, MT8321, MT8365, MT8385, MT8675, MT8696, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791, MT8795T, MT8797, MT8798, MT8871, MT8891
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20784
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.01% / 2.91%
||
7 Day CHG~0.00%
Published-07 Aug, 2023 | 03:21
Updated-14 Nov, 2024 | 14:59
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07826989; Issue ID: ALPS07826989.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-mt6855mt6757cdmt6879mt6873mt6893mt8675mt8765mt6580mt6886mt8788mt8791tmt6983mt8666mt6765mt6757cmt6891mt6737mt6883mt6853tmt6835mt6739mt6757mt8768mt8789mt6769mt6761mt6875mt6889mt8797mt8321mt6768mt8781mt8766mt8786mt6985mt6771mt8385mt6833mt6885mt8673mt6735mt6753mt6762mt6877mt6781mt6853mt6895mt6789androidmt6757chmt8185mt8791mt6779mt6785mt6731mt6763MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8185, MT8321, MT8385, MT8666, MT8673, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
CWE ID-CWE-787
Out-of-bounds Write
CVE-2018-9399
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
ShareView Details
Matching Score-4
Assigner-Android (associated with Google Inc. or Open Handset Alliance)
CVSS Score-7.8||HIGH
EPSS-0.02% / 4.22%
||
7 Day CHG~0.00%
Published-04 Dec, 2024 | 23:13
Updated-19 Dec, 2024 | 17:08
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Action-Not Available
Vendor-Google LLC
Product-androidAndroidandroidpixel
CWE ID-CWE-787
Out-of-bounds Write
CVE-2023-20656
Matching Score-4
Assigner-MediaTek, Inc.
ShareView Details
Matching Score-4
Assigner-MediaTek, Inc.
CVSS Score-6.7||MEDIUM
EPSS-0.02% / 4.04%
||
7 Day CHG-0.04%
Published-06 Apr, 2023 | 00:00
Updated-17 Mar, 2025 | 19:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In geniezone, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07571494; Issue ID: ALPS07571494.

Action-Not Available
Vendor-Google LLCMediaTek Inc.
Product-androidmt6785mt6771mt8385mt8797mt8321mt8791tmt8795tmt6879mt6877mt8788mt6883mt6895mt8789mt8781mt6855mt8786mt6893mt8798mt6983mt6781mt8771mt8766mt6779mt6768mt6833mt6873mt8765mt6889mt8768mt6853mt6789mt6765mt6885MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8321, MT8385, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798
CWE ID-CWE-787
Out-of-bounds Write
  • Previous
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • ...
  • 13
  • 14
  • Next
Details not found