Information Disclosure in Bluetooth by MediaTek Products
CVE-2022-20042

5.5MEDIUM

Key Information:

Vendor

MediaTek
Status
Mt8167, Mt8175, Mt8183, Mt8362a, Mt8365, Mt8385
Vendor
CVE Published:
9 February 2022

What is CVE-2022-20042?

A flaw in the Bluetooth implementation within certain MediaTek products allows for information disclosure due to improper error handling. This vulnerability could potentially expose sensitive data under specific conditions, without requiring elevated privileges or user interaction. Affected users should consult Patch ID: ALPS06108487 to mitigate risks associated with this vulnerability.

Affected Version(s)

MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385 Android 8.1, 9.0, 10.0, 11.0, 12.0

References

https://corp.mediatek.com/product-security-bulletin/Febru...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.