EUVD-2022-25328

Malicious code in bioql PyPI...

Design/Logic Flaw

In mobilelogd, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06308907; Issue ID: ALPS06308907...

CVE-2022-20068

CVE-2022-20068 affects MediaTek devices where the vulnerable component is the mobile_log_d process, due to improper link resolution allowing symbolic link following. The issue could enable local escalation of privilege with System execution privileges required, and exploitation does not require u...