CVE-2022-20030

MEDIUM

6.7

CVSS Score

Published: February 9, 2022 at 10:05 PM UTC

Updated: June 17, 2026 at 04:23 AM UTC

17 products affected across 2 vendorsAndroidMT6885MT6877

Using MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797 by MediaTek, Inc.?

Get instant alerts when new vulnerabilities affect MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.1%

Description

In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05837793; Issue ID: ALPS05837793.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

10.0 11.0 12.0

mediatek-mt6781 (environment) · mediatek-mt6785 (environment) · mediatek-mt6833 (environment) · mediatek-mt6853 (environment) · mediatek-mt6853t (environment) · mediatek-mt6873 (environment) · mediatek-mt6877 (environment) · mediatek-mt6883 (environment) · mediatek-mt6885 (environment) · mediatek-mt6889 (environment) · mediatek-mt6891 (environment) · mediatek-mt6893 (environment) · mediatek-mt8185 (environment) · mediatek-mt8789 (environment) · mediatek-mt8791 (environment) · mediatek-mt8797 (environment)

MT6781 · MediaTekdevice

80%

All versions

MT6785 · MediaTekdevice

80%

All versions

MT6833 · MediaTekdevice

80%

All versions

MT6853 · MediaTekdevice

80%

All versions