Lucene search

K
cvelistMediaTekCVELIST:CVE-2022-20073
HistoryApr 11, 2022 - 7:38 p.m.

CVE-2022-20073

2022-04-1119:38:05
MediaTek
www.cve.org
4
usb preloader
out of bounds write
local privilege escalation
patch alps06160841
issue alps06160841

EPSS

0.001

Percentile

17.6%

In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160841; Issue ID: ALPS06160841.

CNA Affected

[
  {
    "product": "MT2601, MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6799, MT6833, MT6873, MT6877, MT6885, MT6893, MT8163, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8695, MT8696, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0, 12.0"
      }
    ]
  }
]

EPSS

0.001

Percentile

17.6%

Related for CVELIST:CVE-2022-20073