Lucene search

[email protected]CVE-2022-20013

HistoryJan 04, 2022 - 4:15 p.m.

CVE-2022-20013

2022-01-0416:15:10

CWE-367

[email protected]

web.nvd.nist.gov

security

memory corruption

race condition

local privilege escalation

cve-2022-20013

nvd

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05837742.

Affected configurations

Vulners

NVD

Node

googleandroidRange<10.0

googleandroidRange<11.0

mediatekmt6781

mediatekmt6785

mediatekmt6833

mediatekmt6853

mediatekmt6853t

mediatekmt6873

mediatekmt6877

mediatekmt6883

mediatekmt6885

mediatekmt6889

mediatekmt6891

mediatekmt6893

mediatekmt8185

mediatekmt8789

mediatekmt8791

mediatekmt8797

VendorProductVersionCPE
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
mediatekmt6781*cpe:2.3:h:mediatek:mt6781:*:*:*:*:*:*:*:*
mediatekmt6785*cpe:2.3:h:mediatek:mt6785:*:*:*:*:*:*:*:*
mediatekmt6833*cpe:2.3:h:mediatek:mt6833:*:*:*:*:*:*:*:*
mediatekmt6853*cpe:2.3:h:mediatek:mt6853:*:*:*:*:*:*:*:*
mediatekmt6853t*cpe:2.3:h:mediatek:mt6853t:*:*:*:*:*:*:*:*
mediatekmt6873*cpe:2.3:h:mediatek:mt6873:*:*:*:*:*:*:*:*
mediatekmt6877*cpe:2.3:h:mediatek:mt6877:*:*:*:*:*:*:*:*
mediatekmt6883*cpe:2.3:h:mediatek:mt6883:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	*	cpe:2.3:o:google:android::::::::
google	android	*	cpe:2.3:o:google:android::::::::
mediatek	mt6781	*	cpe:2.3:h:mediatek:mt6781::::::::
mediatek	mt6785	*	cpe:2.3:h:mediatek:mt6785::::::::
mediatek	mt6833	*	cpe:2.3:h:mediatek:mt6833::::::::
mediatek	mt6853	*	cpe:2.3:h:mediatek:mt6853::::::::
mediatek	mt6853t	*	cpe:2.3:h:mediatek:mt6853t::::::::
mediatek	mt6873	*	cpe:2.3:h:mediatek:mt6873::::::::
mediatek	mt6877	*	cpe:2.3:h:mediatek:mt6877::::::::
mediatek	mt6883	*	cpe:2.3:h:mediatek:mt6883::::::::

Rows per page:

1-10 of 181

CNA Affected

[
  {
    "product": "MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/January-2022

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-20013

prion1 cvelist1 nvd1