CVE-2022-20079

🗓️ 11 Apr 2022 19:38:10Reported by MediaTekType

In vow, possible read of uninitialized data due to improper input validation. Local information disclosure, System execution privileges needed. No user interaction needed

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-20079	11 Apr 202220:15	–	attackerkb
CNNVD	MediaTek 芯片输入验证错误漏洞	11 Apr 202200:00	–	cnnvd
Cvelist	CVE-2022-20079	11 Apr 202219:38	–	cvelist
EUVD	EUVD-2022-25339	3 Oct 202520:07	–	euvd
NVD	CVE-2022-20079	11 Apr 202220:15	–	nvd
Prion	Input validation	11 Apr 202220:15	–	prion
Positive Technologies	PT-2022-14324 · Vow · Vow	11 Apr 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-20079	22 May 202523:33	–	redhatcve

NVD

Vulners

Node

google androidMatch10.0

google androidMatch11.0

AND

mediatek mt6781Match-

mediatek mt6785Match-

mediatek mt6833Match-

mediatek mt6853Match-

mediatek mt6853tMatch-

mediatek mt6873Match-

mediatek mt6877Match-

mediatek mt6883Match-

mediatek mt6885Match-

mediatek mt6889Match-

mediatek mt6891Match-

mediatek mt6893Match-

mediatek mt8185Match-

mediatek mt8789Match-

mediatek mt8791Match-

mediatek mt8797Match-

[
  {
    "product": "MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/April-2022

21 Nov 2024 06:42Current

4.2Medium risk

Vulners AI Score4.2

CVSS 22.1

CVSS 3.14.4

EPSS0.00015

CWE-908