Lucene search

MediaTekCVE-2022-26436

HistoryAug 01, 2022 - 2:15 p.m.

CVE-2022-26436

2022-08-0114:15:09

CWE-125

MediaTek

web.nvd.nist.gov

cve-2022-26436

emi mpu

out of bounds read

information disclosure

system execution

patch alps07023666

issue alps07023666

nvd

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

In emi mpu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07023666; Issue ID: ALPS07023666.

Affected configurations

Nvd

Vulners

Node

googleandroidMatch12.0

AND

mediatekmt6855Match-

mediatekmt6879Match-

mediatekmt6895Match-

mediatekmt6983Match-

VendorProductVersionCPE
googleandroid12.0cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
mediatekmt6855-cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
mediatekmt6879-cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*
mediatekmt6895-cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
mediatekmt6983-cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	12.0	cpe:2.3:o:google:android:12.0:::::::*
mediatek	mt6855	-	cpe:2.3:h:mediatek:mt6855:-:::::::*
mediatek	mt6879	-	cpe:2.3:h:mediatek:mt6879:-:::::::*
mediatek	mt6895	-	cpe:2.3:h:mediatek:mt6895:-:::::::*
mediatek	mt6983	-	cpe:2.3:h:mediatek:mt6983:-:::::::*

CNA Affected

[
  {
    "product": "MT6855, MT6879, MT6895, MT6983",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 12.0"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/August-2022

Social References

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-26436