CVE-2020-0069

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754

Score
CVSS 3.1 7.8 High
Status
Analyzed - security@android.com
Published
2020-03-10
Last modified
2025-10-21
Known exploited (CISA KEV)
since 2021-11-03, action due 2022-05-03: Apply updates per vendor instructions.
Weaknesses
CWE-787

Affected products

References

 
 
© AVABIS GmbH privacypolicy about