CVE-2022-20071

MEDIUM

6.7

CVSS Score

Published: April 11, 2022 at 07:38 PM UTC

Updated: June 17, 2026 at 04:23 AM UTC

8 products affected across 2 vendorsAndroidMT6885MT6877

Using MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8797 by MediaTek, Inc.?

Get instant alerts when new vulnerabilities affect MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8797 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.1%

Description

In ccu, there is a possible escalation of privilege due to a missing certificate validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06183315; Issue ID: ALPS06183315.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

11.0 12.0

mediatek-mt6833 (environment) · mediatek-mt6853 (environment) · mediatek-mt6873 (environment) · mediatek-mt6877 (environment) · mediatek-mt6885 (environment) · mediatek-mt6893 (environment) · mediatek-mt8797 (environment)

MT6833 · MediaTekdevice

80%

All versions

MT6853 · MediaTekdevice

80%

All versions

MT6873 · MediaTekdevice

80%

All versions

MT6877 · MediaTekdevice

80%

All versions