Vulnerabilities > Mediatek > Linkit Software Development KIT > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-01-03 CVE-2022-32665 Command Injection vulnerability in Mediatek Linkit Software Development KIT 4.6.1
In Boa, there is a possible command injection due to improper input validation.
network
low complexity
mediatek CWE-77
critical
 9.8
9.8
2022-01-24 CVE-2021-30636 Integer Overflow or Wraparound vulnerability in Mediatek Linkit Software Development KIT
In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.
network
low complexity
mediatek CWE-190
critical
 9.8
9.8