CVE-2022-20047

HIGH

7.8

CVSS Score

Published: March 9, 2022 at 05:02 PM UTC

Updated: June 17, 2026 at 04:23 AM UTC

11 products affected across 2 vendorsAndroidMT6885MT6893

Using MT5816, MT5835, MT6885, MT6893, MT9900, MT9901, MT9950, MT9969, MT9970, MT9980 by MediaTek, Inc.?

Get instant alerts when new vulnerabilities affect MT5816, MT5835, MT6885, MT6893, MT9900, MT9901, MT9950, MT9969, MT9970, MT9980 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.1%

Description

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; Issue ID: ALPS05917489.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

10.0 11.0 12.0

mediatek-mt5816 (environment) · mediatek-mt5835 (environment) · mediatek-mt6885 (environment) · mediatek-mt6893 (environment) · mediatek-mt9900 (environment) · mediatek-mt9901 (environment) · mediatek-mt9950 (environment) · mediatek-mt9969 (environment) · mediatek-mt9970 (environment) · mediatek-mt9980 (environment)

MT5816 · MediaTekdevice

80%

All versions

MT5835 · MediaTekdevice

80%

All versions

MT6885 · MediaTekdevice

80%

All versions

MT6893 · MediaTekdevice

80%

All versions