SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2020-0069

Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability

KEVHIGH 7.8EPSS 1.37%

Does this matter?

Known to be exploited in the wild (CISA KEV, CISA remediation deadline 3 May 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.

Description

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754

CVSS 3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
1.37% probability · 70th percentile
CISA KEV
Listed 3 November 2021 · due 3 May 2022
Weakness
CWE-787
Affected
google/android · huawei/berkeley-l09 firmware · huawei/columbia-al10b firmware · huawei/columbia-l29d firmware · huawei/columbia-tl00b firmware · huawei/columbia-tl00d firmware · huawei/cornell-al00a firmware · huawei/cornell-tl10b firmware · huawei/dura-al00a firmware · huawei/honor 20 pro firmware · huawei/y6 2019 firmware · huawei/nova 3 firmware · huawei/nova 4 firmware · huawei/honor 8a firmware · huawei/honor view 20 firmware · huawei/jakarta-al00a firmware · huawei/katyusha-al00a firmware · huawei/katyusha-al10a firmware · huawei/madrid-al00a firmware · huawei/paris-l29b firmware · +9 more
Source
security@android.com

CISA notes

Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2020-0069

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.