CVE-2022-20106
In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330460; Issue ID: DTV03330460.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - security@mediatek.com
- Published
- 2022-05-03
- Last modified
- 2024-08-03
- Weaknesses
- CWE-787
Affected products
- Android (Google)
- Linux Kernel (Linux)
- Mt9011 (Mediatek Inc.)
- Mt9215 (Mediatek Inc.)
- Mt9216 (Mediatek Inc.)
- Mt9220 (Mediatek Inc.)
- Mt9221 (Mediatek Inc.)
- Mt9255 (Mediatek Inc.)
- Mt9256 (Mediatek Inc.)
- Mt9266 (Mediatek Inc.)
- Mt9269 (Mediatek Inc.)
- Mt9285 (Mediatek Inc.)
- Mt9286 (Mediatek Inc.)
- Mt9288 (Mediatek Inc.)
- Mt9600 (Mediatek Inc.)
- Mt9602 (Mediatek Inc.)
- Mt9610 (Mediatek Inc.)
- Mt9611 (Mediatek Inc.)
- Mt9612 (Mediatek Inc.)
- Mt9613 (Mediatek Inc.)
- Mt9615 (Mediatek Inc.)
- Mt9617 (Mediatek Inc.)
- Mt9629 (Mediatek Inc.)
- Mt9630 (Mediatek Inc.)
- Mt9631 (Mediatek Inc.)
- Mt9632 (Mediatek Inc.)
- Mt9636 (Mediatek Inc.)
- Mt9638 (Mediatek Inc.)
- Mt9639 (Mediatek Inc.)
- Mt9650 (Mediatek Inc.)
- Mt9652 (Mediatek Inc.)
- Mt9666 (Mediatek Inc.)
- Mt9669 (Mediatek Inc.)
- Mt9670 (Mediatek Inc.)
- Mt9675 (Mediatek Inc.)
- Mt9685 (Mediatek Inc.)
- Mt9686 (Mediatek Inc.)
- Mt9688 (Mediatek Inc.)
References
- https://corp.mediatek.com/product-security-bulletin/May-2022
