Bluetooth Elevation of Privilege in Mediatek Products
CVE-2022-20043
7.8HIGH
Key Information:
- Vendor
MediaTek
- Vendor
- CVE Published:
- 9 February 2022
What is CVE-2022-20043?
A vulnerability exists in Mediatek Bluetooth products that allows for a potential escalation of privilege due to a missing permission check. This flaw can be exploited locally without the need for additional execution privileges or user interaction, enabling unauthorized access to sensitive functions within the device. It is crucial for users of affected Mediatek devices to ensure they are running the latest security patches to mitigate this risk. For detailed information, refer to the Mediatek product security bulletin.
Affected Version(s)
MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385 Android 8.1, 9.0, 10.0, 11.0, 12.0