CVE-2022-20109

CVE-2022-20109 affects MediaTek’s ion component (ALPS platform). The issue is a use-after-free caused by improper update of reference counts, enabling local escalation of privilege without additional execution privileges or user interaction. Patch ALPS06399915 exists (Issue ALPS06399915) as the r...