Information Disclosure Vulnerability in MediaTek Cmdq Driver
CVE-2022-20029
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 9 February 2022
What is CVE-2022-20029?
The cmdq driver from MediaTek has a vulnerability that allows for a potential out-of-bounds read due to an incorrect bounds check. This flaw could lead to local information disclosure that requires system execution privileges for exploitation. Importantly, no user interaction is needed to execute the attack, making this a notable risk for users of affected MediaTek products. A patch addressing this vulnerability has been identified and must be applied to mitigate the potential threat.
Affected Version(s)
MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8163, MT8167, MT8168, MT8173, MT8175, MT8183, MT8321, MT8362A, MT8365, MT8385, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8791, MT8797 Android 10.0, 11.0, 12.0