Lucene search

MediaTekCVE-2022-20073

HistoryApr 11, 2022 - 8:15 p.m.

CVE-2022-20073

2022-04-1120:15:19

CWE-191

MediaTek

web.nvd.nist.gov

cve-2022-20073

usb

preloader

out of bounds write

integer underflow

local privilege escalation

nvd

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.6%

JSON

In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160841; Issue ID: ALPS06160841.

Affected configurations

Nvd

Vulners

Node

googleandroidMatch10.0

googleandroidMatch11.0

googleandroidMatch12.0

AND

mediatekmt2601Match-

mediatekmt6580Match-

mediatekmt6735Match-

mediatekmt6739Match-

mediatekmt6761Match-

mediatekmt6763Match-

mediatekmt6765Match-

mediatekmt6768Match-

mediatekmt6771Match-

mediatekmt6779Match-

mediatekmt6781Match-

mediatekmt6785Match-

mediatekmt6799Match-

mediatekmt6833Match-

mediatekmt6873Match-

mediatekmt6877Match-

mediatekmt6885Match-

mediatekmt6893Match-

mediatekmt8163Match-

mediatekmt8167Match-

mediatekmt8167sMatch-

mediatekmt8168Match-

mediatekmt8173Match-

mediatekmt8175Match-

mediatekmt8183Match-

mediatekmt8185Match-

mediatekmt8321Match-

mediatekmt8362aMatch-

mediatekmt8365Match-

mediatekmt8385Match-

mediatekmt8666Match-

mediatekmt8667Match-

mediatekmt8675Match-

mediatekmt8695Match-

mediatekmt8696Match-

mediatekmt8765Match-

mediatekmt8766Match-

mediatekmt8768Match-

mediatekmt8786Match-

mediatekmt8788Match-

mediatekmt8789Match-

mediatekmt8791Match-

mediatekmt8797Match-

VendorProductVersionCPE
googleandroid10.0cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
googleandroid11.0cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
googleandroid12.0cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
mediatekmt2601-cpe:2.3:h:mediatek:mt2601:-:*:*:*:*:*:*:*
mediatekmt6580-cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*
mediatekmt6735-cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*
mediatekmt6739-cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*
mediatekmt6761-cpe:2.3:h:mediatek:mt6761:-:*:*:*:*:*:*:*
mediatekmt6763-cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*
mediatekmt6765-cpe:2.3:h:mediatek:mt6765:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	10.0	cpe:2.3:o:google:android:10.0:::::::*
google	android	11.0	cpe:2.3:o:google:android:11.0:::::::*
google	android	12.0	cpe:2.3:o:google:android:12.0:::::::*
mediatek	mt2601	-	cpe:2.3:h:mediatek:mt2601:-:::::::*
mediatek	mt6580	-	cpe:2.3:h:mediatek:mt6580:-:::::::*
mediatek	mt6735	-	cpe:2.3:h:mediatek:mt6735:-:::::::*
mediatek	mt6739	-	cpe:2.3:h:mediatek:mt6739:-:::::::*
mediatek	mt6761	-	cpe:2.3:h:mediatek:mt6761:-:::::::*
mediatek	mt6763	-	cpe:2.3:h:mediatek:mt6763:-:::::::*
mediatek	mt6765	-	cpe:2.3:h:mediatek:mt6765:-:::::::*

Rows per page:

1-10 of 461

CNA Affected

[
  {
    "product": "MT2601, MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6799, MT6833, MT6873, MT6877, MT6885, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8695, MT8696, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0, 12.0"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/April-2022

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.6%

JSON

Related for CVE-2022-20073