CVE-2022-20063

MEDIUM

6.5

CVSS Score

Published: April 11, 2022 at 07:37 PM UTC

Updated: June 17, 2026 at 04:23 AM UTC

8 products affected across 2 vendorsAndroidMT6765MT8786

Using MT6765, MT8385, MT8666, MT8667, MT8766, MT8786, MT8788 by MediaTek, Inc.?

Get instant alerts when new vulnerabilities affect MT6765, MT8385, MT8666, MT8667, MT8766, MT8786, MT8788 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.1%

Description

In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06171715; Issue ID: ALPS06171715.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

10.0 9.0

mediatek-mt6765 (environment) · mediatek-mt8385 (environment) · mediatek-mt8666 (environment) · mediatek-mt8667 (environment) · mediatek-mt8766 (environment) · mediatek-mt8786 (environment) · mediatek-mt8788 (environment)

MT6765 · MediaTekdevice

80%

All versions

MT8385 · MediaTekdevice

80%

All versions

MT8666 · MediaTekdevice

80%

All versions

MT8667 · MediaTekdevice

80%

All versions