Bluetooth Elevation of Privilege in Mediatek Products

CVE-2022-20043

Summary

A vulnerability exists in Mediatek Bluetooth products that allows for a potential escalation of privilege due to a missing permission check. This flaw can be exploited locally without the need for additional execution privileges or user interaction, enabling unauthorized access to sensitive functions within the device. It is crucial for users of affected Mediatek devices to ensure they are running the latest security patches to mitigate this risk. For detailed information, refer to the Mediatek product security bulletin.

References