Mt6797

Vendor:

First CVE: Sep 27, 2021 · Active for 4 years

37
Total CVEs
More Total CVEs than 97% of tracked products
12.3
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Mt6797 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 27, 2021
4 years ago
Most Recent CVE
Oct 2, 2023
1,026 days ago

CVE Severity & Scoring

Mt679737 CVEs
All CVEs352,231 CVEs
MediumHighCritical
Attack Vector
Local34 (91.9%)
Network3 (8.1%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low36 (97.3%)
High1 (2.7%)
Unknown0 (0.0%)
User Interaction
None37 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low26 (70.3%)
High7 (18.9%)
None4 (10.8%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (37 CVEs).

37 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD)
Jul 6, 20229.832NONO
In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additiona
Jul 6, 20229.832NONO
In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User in
May 3, 20228.427NONO
In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privile
Mar 10, 20227.827NONO
In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges
Dec 15, 20217.826NONO
In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with no additional execution privileges neede
May 3, 20227.825NONO
In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. This could lead to local escalation of privilege with no additional execu
May 3, 20227.825NONO
In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This could lead to local escalation of privilege with no addition
May 3, 20227.825NONO
In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is
Sep 27, 20217.825NONO
In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is
Sep 27, 20217.825NONO

Exploit Exposure

Signals from CVEs in this product scope (37 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (37 CVEs).

Media Mentions

Signals from CVEs in this product scope (37 CVEs).

Top CNAs Publishing CVEs For Mt6797

Top CWEs

Versions

No cataloged versions.