SB2023090402 - Multiple vulnerabilities in MediaTek chipsets
Published: September 4, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 45 vulnerabilities.
1) Improper input validation (CVE-ID: CVE-2023-20831)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within gps. A local privileged application can execute arbitrary code.
2) Improper input validation (CVE-ID: CVE-2023-20820)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within wlan service. A local privileged application can execute arbitrary code.
3) Improper input validation (CVE-ID: CVE-2023-20830)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within gps. A local privileged application can execute arbitrary code.
4) Improper input validation (CVE-ID: CVE-2023-20821)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within nvram. A local privileged application can execute arbitrary code.
5) Improper input validation (CVE-ID: CVE-2023-20822)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within netdagent. A local privileged application can execute arbitrary code.
6) Improper input validation (CVE-ID: CVE-2023-20823)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to perform service disruption.
The vulnerability exists due to an incorrect status check within cmdq. A local privileged application can perform service disruption.
7) Improper input validation (CVE-ID: CVE-2023-20824)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to a missing permission check within duraspeed. A local application can gain access to sensitive information.
8) Improper input validation (CVE-ID: CVE-2023-20825)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to a missing permission check within duraspeed. A local application can gain access to sensitive information.
9) Improper input validation (CVE-ID: CVE-2023-20826)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to a missing permission check within cta. A local application can gain access to sensitive information.
10) Improper Synchronization (CVE-ID: CVE-2023-20827)
CWE-ID: CWE-662 - Improper Synchronization
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a race condition within ims service. A local privileged application can execute arbitrary code.
11) Improper input validation (CVE-ID: CVE-2023-20828)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within gps. A local privileged application can execute arbitrary code.
12) Improper input validation (CVE-ID: CVE-2023-20829)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within gps. A local privileged application can execute arbitrary code.
13) Improper input validation (CVE-ID: CVE-2023-20842)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing within imgsys_cmdq. A local privileged application can execute arbitrary code.
14) Buffer overflow (CVE-ID: CVE-2023-20841)
CWE-ID: CWE-120 - Buffer overflow
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing valid range checking within imgsys. A local privileged application can execute arbitrary code.
15) Improper input validation (CVE-ID: CVE-2023-20832)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within gps. A local privileged application can execute arbitrary code.
16) Improper input validation (CVE-ID: CVE-2023-20833)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to a missing bounds check within keyinstall. A local privileged application can gain access to sensitive information.
17) Use After Free (CVE-ID: CVE-2023-20834)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a race condition within pda. A local privileged application can execute arbitrary code.
18) Use After Free (CVE-ID: CVE-2023-20835)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a race condition within camsys. A local privileged application can execute arbitrary code.
19) Out-of-bounds read (CVE-ID: CVE-2023-20836)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to a missing bounds check within camsys. A local privileged application can gain access to sensitive information.
20) Out-of-bounds write (CVE-ID: CVE-2023-20837)
CWE-ID: CWE-787 - Out-of-bounds write
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing bounds check within seninf. A local privileged application can execute arbitrary code.
21) Out-of-bounds read (CVE-ID: CVE-2023-20838)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to a race condition within imgsys. A local privileged application can gain access to sensitive information.
22) Out-of-bounds read (CVE-ID: CVE-2023-20839)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to a missing valid range checking within imgsys. A local privileged application can gain access to sensitive information.
23) Out-of-bounds write (CVE-ID: CVE-2023-20840)
CWE-ID: CWE-787 - Out-of-bounds write
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing valid range checking within imgsys. A local privileged application can execute arbitrary code.
24) Improper input validation (CVE-ID: CVE-2023-20843)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to a missing valid range checking within imgsys_cmdq. A local privileged application can gain access to sensitive information.
25) Improper input validation (CVE-ID: CVE-2023-20845)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to a missing valid range checking within imgsys. A local privileged application can gain access to sensitive information.
26) Out-of-bounds read (CVE-ID: CVE-2023-20846)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to a missing valid range checking within imgsys_cmdq. A local privileged application can gain access to sensitive information.
27) Improper input validation (CVE-ID: CVE-2023-20847)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to perform service disruption.
The vulnerability exists due to a missing valid range checking within imgsys_cmdq. A local privileged application can perform service disruption.
28) Improper input validation (CVE-ID: CVE-2023-20848)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing valid range checking within imgsys_cmdq. A local privileged application can execute arbitrary code.
29) Use After Free (CVE-ID: CVE-2023-20849)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing valid range checking within imgsys_cmdq. A local privileged application can execute arbitrary code.
30) Out-of-bounds write (CVE-ID: CVE-2023-20850)
CWE-ID: CWE-787 - Out-of-bounds write
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a missing valid range checking within imgsys_cmdq. A local privileged application can execute arbitrary code.
31) Out-of-bounds read (CVE-ID: CVE-2023-20851)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to a race condition within stc. A local privileged application can execute arbitrary code.
32) Out-of-bounds write (CVE-ID: CVE-2023-32805)
CWE-ID: CWE-787 - Out-of-bounds write
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to an insecure default value within power. A local privileged application can execute arbitrary code.
33) Improper input validation (CVE-ID: CVE-2023-32806)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within wlan driver. A local privileged application can execute arbitrary code.
34) Improper Access Control for Register Interface (CVE-ID: CVE-2023-32808)
CWE-ID: CWE-1262 - Improper Access Control for Register Interface
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper access control of register interface within bluetooth driver. A local privileged application can execute arbitrary code.
35) Improper input validation (CVE-ID: CVE-2023-32807)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within connectivity system driver. A local privileged application can execute arbitrary code.
36) Improper Access Control for Register Interface (CVE-ID: CVE-2023-32809)
CWE-ID: CWE-1262 - Improper Access Control for Register Interface
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper access control of register interface within bluetooth driver. A local privileged application can execute arbitrary code.
37) Improper input validation (CVE-ID: CVE-2023-32810)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to improper input validation within bluetooth driver. A local privileged application can gain access to sensitive information.
38) Improper input validation (CVE-ID: CVE-2023-32811)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within connectivity system driver. A local privileged application can execute arbitrary code.
39) Improper input validation (CVE-ID: CVE-2023-32812)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within gnss service. A local privileged application can execute arbitrary code.
40) Improper input validation (CVE-ID: CVE-2023-32813)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within gnss service. A local privileged application can execute arbitrary code.
41) Improper input validation (CVE-ID: CVE-2023-32814)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within gnss service. A local privileged application can execute arbitrary code.
42) Improper input validation (CVE-ID: CVE-2023-32815)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within gnss service. A local privileged application can execute arbitrary code.
43) Improper input validation (CVE-ID: CVE-2023-32816)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within gnss service. A local privileged application can execute arbitrary code.
44) Improper input validation (CVE-ID: CVE-2023-32817)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation within gnss service. A local privileged application can execute arbitrary code.
45) Out-of-bounds read (CVE-ID: CVE-2023-20844)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a local privileged application to gain access to sensitive information.
The vulnerability exists due to a missing valid range checking within imgsys_cmdq. A local privileged application can gain access to sensitive information.
Remediation
Install update from vendor's website.