Actively exploited in the wild
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
MediaTek - Multiple Chipsets · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2020-0069
HighCVSS 7.8KEVSummary
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android, Versions: Android kernel, Android ID: A-147882143, References: M-ALPS04356754.
Risk Assessment
The risk for the organization is the possibility of local privilege escalation by a malicious app, potentially leading to device compromise and access to sensitive data.
Recommendation
It is recommended to install Android security updates that include kernel patches and to enable and configure SELinux in enforcing mode.
Other vulnerabilities in Android kernel
See all- CVE-2017-13174High
CVE-2017-13174 is a privilege escalation vulnerability in the Android kernel. It affects Android kernel versions and may allow unauthorized access to system resources.
- CVE-2017-13168High
CVE-2017-13168 is a privilege escalation vulnerability in the Android kernel SCSI driver. It affects the Android kernel in versions related to Android ID A-65023233.
- CVE-2017-13167High
CVE-2017-13167 describes an elevation of privilege vulnerability in the kernel sound timer of Android. It affects the Android kernel in versions that do not include patches.
- CVE-2017-13164High
An information disclosure vulnerability in the kernel binder driver of Android. It affects the Android kernel and may lead to unauthorized access to sensitive data.
- CVE-2017-13163High
CVE-2017-13163 is a privilege escalation vulnerability in the MTP USB driver in the Android kernel. It affects Android kernel versions.
- CVE-2017-13162High
CVE-2017-13162 is a privilege escalation vulnerability in the Android kernel, which may allow unauthorized access to system resources.
- CVE-2017-0864High
CVE-2017-0864 is a privilege escalation vulnerability in the MediaTek ioctl (flashlight) in Android. It affects the Android kernel.
- CVE-2017-0862High
CVE-2017-0862 is a privilege escalation vulnerability in the Android kernel. It affects unspecified versions of the Android kernel.
- CVE-2017-0794High
CVE-2017-0794 is a privilege escalation vulnerability in the Upstream kernel SCSI driver. It affects the Android operating system and its kernel.
- CVE-2017-0750High
An elevation of privilege vulnerability in the Upstream Linux file system. It affects Android kernels.
Original NVD description (English source)
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754