CVE-2022-20066
In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171729; Issue ID: ALPS06171729.
- Score
- CVSS 3.1 4.4 Medium
- Status
- Modified - security@mediatek.com
- Published
- 2022-04-11
- Last modified
- 2024-08-03
- Weaknesses
- CWE-755
Affected products
- Android (Google)
- Mt6580 (Mediatek Inc.)
- Mt6739 (Mediatek Inc.)
- Mt6761 (Mediatek Inc.)
- Mt6765 (Mediatek Inc.)
- Mt6769 (Mediatek Inc.)
- Mt6771 (Mediatek Inc.)
- Mt6785 (Mediatek Inc.)
- Mt6833 (Mediatek Inc.)
- Mt6873 (Mediatek Inc.)
- Mt6875 (Mediatek Inc.)
- Mt6877 (Mediatek Inc.)
- Mt6891 (Mediatek Inc.)
- Mt8168 (Mediatek Inc.)
- Mt8365 (Mediatek Inc.)
- Mt8666 (Mediatek Inc.)
- Mt8667 (Mediatek Inc.)
- Mt8696 (Mediatek Inc.)
- Mt8766 (Mediatek Inc.)
- Mt8768 (Mediatek Inc.)
- Mt8788 (Mediatek Inc.)
References
- https://corp.mediatek.com/product-security-bulletin/May-2022
