Local Privilege Escalation Vulnerability in Bluetooth on MediaTek Devices

CVE-2022-20044

What is CVE-2022-20044?

A use after free vulnerability in the Bluetooth implementation on MediaTek devices may lead to a service crash, allowing local escalation of privilege without requiring any additional execution privileges. The issue can be exploited without user interaction, raising significant security concerns for affected devices. Users of MediaTek devices are advised to apply the necessary patches to mitigate potential risks. For detailed information, refer to the official MediaTek product security bulletin.

References