CVE-2022-20021

In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198513; Issue ID: ALPS06198513.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@mediatek.com

Published

2022-01-04

Last modified

2024-08-03

Affected products

• Android (Google)
• Mt6580 (Mediatek Inc.)
• Mt6630 (Mediatek Inc.)
• Mt6735 (Mediatek Inc.)
• Mt6737 (Mediatek Inc.)
• Mt6739 (Mediatek Inc.)
• Mt6750s (Mediatek Inc.)
• Mt6753 (Mediatek Inc.)
• Mt6755s (Mediatek Inc.)
• Mt6757 (Mediatek Inc.)
• Mt6757c (Mediatek Inc.)
• Mt6757cd (Mediatek Inc.)
• Mt6757ch (Mediatek Inc.)
• Mt6763 (Mediatek Inc.)
• Mt6771 (Mediatek Inc.)
• Mt7662t (Mediatek Inc.)
• Mt7663 (Mediatek Inc.)
• Mt7668 (Mediatek Inc.)
• Mt8163 (Mediatek Inc.)
• Mt8167 (Mediatek Inc.)
• Mt8167s (Mediatek Inc.)
• Mt8173 (Mediatek Inc.)
• Mt8183 (Mediatek Inc.)
• Mt8321 (Mediatek Inc.)
• Mt8362a (Mediatek Inc.)
• Mt8362b (Mediatek Inc.)
• Mt8385 (Mediatek Inc.)
• Mt8765 (Mediatek Inc.)
• Mt8788 (Mediatek Inc.)

References

• https://corp.mediatek.com/product-security-bulletin/January-2022