Peng Xiao

The issue is related to an elevation of privilege vulnerability in the MediaTek power driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This problem is rated as High because it first requires compromising a privileged process.

The issue is related to an elevation of privilege vulnerability in the MediaTek thermal driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is associated with inadequate access control in the MediaTek thermal driver, potentially allowing an attacker to execute arbitrary code in the kernel context using a special application.

The issue is related to an elevation of privilege vulnerability in the NVIDIA crypto driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is also associated with insufficient access control in the NVIDIA crypto driver, potentially allowing a remote attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. This could enable a local malicious application to execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. The vulnerability is rated as Critical and may require reflashing the operating system to repair the device.

The issue concerns a flaw in the video driver within the kernel of the Android operating system. This flaw can be exploited by attackers to gain privileges, potentially through a crafted application. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to the MediaTek GPS driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application.