6.7 Medium

CVE-2022-20014 In vow driver, there is a possible memory corruption due to improper input validation

Description

In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05857308; Issue ID: ALPS05857308.

Affected products and versions

Product	Affected versions	Fixed in
MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8185, MT8385, MT8788, MT8789	Versions not published

Do you use MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8185, MT8385, MT8788, MT8789?

Track this CVE Watch MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8185, MT8385, MT8788, MT8789 Check my SBOMs

www.cveye.io/en/cve/CVE-2022-20014

Timeline

Published January 4, 2022
Last modified May 22, 2025

References

corp.mediatek.com corp.mediatek.com

Track this CVE