Lr9 vulnerabilities

2 known vulnerabilities in Lr9 from MediaTek. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  MT2731, MT2735, MT6297, MT6725, MT6735…: Out-of-bounds Write

  CVE-2022-21744Jul 6, 2022MediaTekEPSS 3.52%

  In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding GPRS Packet Neighbour Cell Data (PNCD) improper neighbouring cell size with no additional execution privileges needed.

• 9.8 Critical severity

  MT2731, MT2735, MT6297, MT6725, MT6735…: Out-of-bounds Write

  CVE-2022-20083Jul 6, 2022MediaTekEPSS 2.82%

  In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution when decoding combined FACILITY with no additional execution privileges needed. User interaction is not needed for exploitation.