MediaTek, Inc. MT6879, MT6895, MT6983

• CVE-2023-20620 Unrated In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for <0.1%
• CVE-2023-20606 Medium 4.4 In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed <0.1%
• CVE-2022-32642 Medium 6.4 In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl 0.1%
• CVE-2022-32643 Medium 6.4 In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploit 0.2%
• CVE-2022-32650 Medium 6.7 In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploi 0.1%
• CVE-2022-32647 Medium 6.7 In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not need <0.1%
• CVE-2022-32611 Medium 6.7 In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed 0.1%
• CVE-2022-32605 Medium 6.7 In isp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not need 0.1%
• CVE-2022-26452 Unrated In isp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploit <0.1%
• CVE-2022-26449 Unrated In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not need 0.1%
• CVE-2022-26450 Unrated In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for expl <0.1%
• CVE-2022-21788 Unrated In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed 0.1%