Out of Bounds Write Vulnerability in MediaTek Bluetooth Products
CVE-2022-20026

7.8HIGH

Key Information:

Vendor

MediaTek
Status
Mt8167, Mt8175, Mt8183, Mt8362a, Mt8365, Mt8385
Vendor
CVE Published:
9 February 2022

What is CVE-2022-20026?

A vulnerability exists in MediaTek Bluetooth products that allows for an out of bounds write due to a missing bounds check. This flaw enables potential local escalation of privileges without the need for additional execution privileges or user interaction, posing a significant risk to device security. Affected users are encouraged to apply the necessary patches to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385 Android 8.1, 9.0, 10.0, 11.0, 12.0

References

https://corp.mediatek.com/product-security-bulletin/Febru...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.