CVE-2022-20043

In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06148177; Issue ID: ALPS06148177.

Score

CVSS 3.1 7.8 High

Status

Modified - security@mediatek.com

Published

2022-02-09

Last modified

2024-08-03

Weaknesses

CWE-862

Affected products

• Android (Google)
• Mt8167 (Mediatek Inc.)
• Mt8175 (Mediatek Inc.)
• Mt8183 (Mediatek Inc.)
• Mt8362a (Mediatek Inc.)
• Mt8365 (Mediatek Inc.)
• Mt8385 (Mediatek Inc.)

References

• https://corp.mediatek.com/product-security-bulletin/February-2022