CVEvulnerability
CVE-2022-20051
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-03-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-269
Description
In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219127; Issue ID: ALPS06219127.
Affected configurations
• google android 11.0
• google android 12.0
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://corp.mediatek.com/product-security-bulletin/March-2022 Vendor Advisory
- https://corp.mediatek.com/product-security-bulletin/March-2022 Vendor Advisory