Yang Song

The issue is related to an elevation of privilege vulnerability in the Qualcomm QCE driver. It affects the Android product.

The issue is related to an incorrect bounds check in an ISP Camera kernel driver function, which may potentially lead to an out-of-bounds write.

The issue is related to an elevation of privilege vulnerability in the MediaTek auxadc driver, which is associated with inadequate access control. This could allow a remote attacker to elevate their privileges.

The issue is related to a lack of access control in the MediaTek kernel of the Android operating system, which can be exploited by a remote attacker to elevate their privileges.

The issue is related to insufficient access control in the MediaTek teei component of the Android operating system. It allows a remote attacker to elevate their privileges.

A elevation of privilege issue exists in the MediaTek gpu driver.

The issue is related to a elevation of privilege vulnerability in the MediaTek networking driver, which is associated with inadequate access control. This could allow a remote attacker to elevate their privileges.

The issue is related to an elevation of privilege vulnerability in the MediaTek power driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This problem is rated as High because it first requires compromising a privileged process.

The issue is related to an elevation of privilege vulnerability in the MediaTek thermal driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is associated with inadequate access control in the MediaTek thermal driver, potentially allowing an attacker to execute arbitrary code in the kernel context using a special application.

The issue is related to an elevation of privilege vulnerability in the NVIDIA crypto driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is also associated with insufficient access control in the NVIDIA crypto driver, potentially allowing a remote attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. This could enable a local malicious application to execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. The vulnerability is rated as Critical and may require reflashing the operating system to repair the device.

The issue concerns a flaw in the video driver within the kernel of the Android operating system. This flaw can be exploited by attackers to gain privileges, potentially through a crafted application. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.