CVE-2022-20106

2022-05-0320:05:17

MediaTek

www.cve.org

0.0004 Low

EPSS

Percentile

5.1%

JSON

In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330460; Issue ID: DTV03330460.

CNA Affected

[
  {
    "product": "MT9011, MT9215, MT9216, MT9220, MT9221, MT9255, MT9256, MT9266, MT9269, MT9285, MT9286, MT9288, MT9600, MT9602, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9629, MT9630, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9666, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 9.0, 10.0, 11.0 or Linux Kernel 4.9, 4.19"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/May-2022

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-20106