CVE-2022-20056

🗓️ 09 Mar 2022 17:02:46Reported by MediaTekType

In preloader (usb), possible out of bounds write, local escalation of privilege

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-20056	10 Mar 202217:45	–	attackerkb
CNNVD	MediaTek 多款产品缓冲区错误漏洞	10 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-20056	9 Mar 202217:02	–	cvelist
EUVD	EUVD-2022-25316	3 Oct 202520:07	–	euvd
NVD	CVE-2022-20056	10 Mar 202217:45	–	nvd
OSV	CVE-2022-20056	10 Mar 202217:45	–	osv
Prion	Out-of-bounds	10 Mar 202217:45	–	prion
RedhatCVE	CVE-2022-20056	22 May 202523:33	–	redhatcve

NVD

Vulners

Node

google androidMatch10.0

google androidMatch11.0

google androidMatch12.0

AND

mediatek mt6761Match-

mediatek mt6762Match-

mediatek mt6765Match-

mediatek mt6768Match-

mediatek mt6771Match-

mediatek mt6779Match-

mediatek mt6781Match-

mediatek mt6785Match-

mediatek mt6833Match-

mediatek mt6853Match-

mediatek mt6853tMatch-

mediatek mt6873Match-

mediatek mt6877Match-

mediatek mt6885Match-

mediatek mt6893Match-

mediatek mt8183Match-

mediatek mt8185Match-

mediatek mt8321Match-

mediatek mt8385Match-

mediatek mt8666Match-

mediatek mt8667Match-

mediatek mt8675Match-

mediatek mt8735aMatch-

mediatek mt8735bMatch-

mediatek mt8765Match-

mediatek mt8766Match-

mediatek mt8768Match-

mediatek mt8786Match-

mediatek mt8788Match-

mediatek mt8789Match-

mediatek mt8791Match-

mediatek mt8797Match-

[
  {
    "product": "MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6893, MT8183, MT8185, MT8321, MT8385, MT8666, MT8667, MT8675, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0, 12.0"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/March-2022

21 Nov 2024 06:42Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.4

CVSS 3.16.6

EPSS0.00015

CWE-787