Mediatek Linkit Software Development Kit vulnerabilities

3 vulnerabilities

Known vulnerabilities in Mediatek Linkit Software Development Kit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-30636mediateklinkit_software_development_kit
EPSS score
1.47%
In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.9.8CVE-2022-32665mediatek, inc.en7528, en7580+1
EPSS score
1.60%
In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124.8.8CVE-2022-32664mediatek, inc.en7516, en7528, en7529, en7561, en7562, en7580+1
EPSS score
1.23%
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Patch ID: A20220004; Issue ID: OSBNB00140929.