CVE-2022-20049

🗓️ 09 Mar 2022 17:02:22Reported by MediaTekType

In vpu, possible privilege escalation due to missing permission check

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-20049	10 Mar 202217:45	–	attackerkb
Circl	CVE-2022-20049	10 Mar 202220:12	–	circl
CNNVD	MediaTek 多款产品安全漏洞	10 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-20049	9 Mar 202217:02	–	cvelist
EUVD	EUVD-2022-25309	3 Oct 202520:07	–	euvd
NVD	CVE-2022-20049	10 Mar 202217:45	–	nvd
Prion	Privilege escalation	10 Mar 202217:45	–	prion
Positive Technologies	PT-2022-14296 · Vpu · Vpu	9 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-20049	22 May 202522:19	–	redhatcve

NVD

Vulners

Node

google androidMatch10.0

google androidMatch11.0

AND

mediatek mt6779Match-

mediatek mt6785Match-

mediatek mt6853Match-

mediatek mt6853tMatch-

mediatek mt6873Match-

mediatek mt6875Match-

mediatek mt6877Match-

mediatek mt6883Match-

mediatek mt6885Match-

mediatek mt6889Match-

mediatek mt6891Match-

mediatek mt6893Match-

mediatek mt8168Match-

mediatek mt8175Match-

mediatek mt8183Match-

mediatek mt8185Match-

mediatek mt8362aMatch-

mediatek mt8365Match-

mediatek mt8385Match-

mediatek mt8788Match-

[
  {
    "product": "MT6779, MT6785, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8788",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/March-2022

21 Nov 2024 06:42Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.6

CVSS 3.16.7

EPSS0.00013

CWE-862