SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-15027

The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clear_emmc_nomedia_entry in…

CRITICAL 9.8EPSS 3.18%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.18%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clear_emmc_nomedia_entry in platform/mt6577/external/meta/emmc/meta_clr_emmc.c invokes 'system("/system/bin/rm -r /data/' followed by this filename upon an eMMC clearance from a Meta Mode boot. NOTE: compromise of Fire OS on the Amazon Echo Dot would require a second hypothetical vulnerability that allows creation of the required file under /data.

CVSS 3.0
9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
3.18% probability · 88th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-78
Affected
mediatek/mt8163 firmware · mediatek/mt6625 firmware · mediatek/mt6577 firmware
Source
cve@mitre.org
EPSS trend
0%3%5%27 October 2026: 3.18%27 October 202627 October 2026

EPSS 3.2% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.