Code injection

The MediaTek Embedded Multimedia Card eMMC subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clearemmcnomediaentry in platform/mt6577/external/meta/emmc/metaclremmc.c...

PT-2019-13939

Name of the Vulnerable Software and Affected Versions MediaTek Embedded Multimedia Card eMMC subsystem versions affected versions not specified Description The issue allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data. This is because the clea...