In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07740194; Issue ID: ALPS07740194.
📦
rdk-b
Vendor: rdkcentral
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
7
Remote Access
Total CVEs
55
Total Indexed
Avg. EPSS
0.15%
Exploit Prob.
Security Vulnerability Index
Page 5 / 6
4.4
CVSS
Severity: MEDIUM
6.7
CVSS
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734004 / ALPS07874358 (For MT6880, MT6890, MT6980, MT6990 only); Issue ID: ALPS07734004 / ALPS07874358 (For MT6880, MT6890, MT6980, MT6990 only).
Severity: MEDIUM