CVE-2022-20079

MEDIUM

4.4

CVSS Score

Published: April 11, 2022 at 07:38 PM UTC

Updated: June 17, 2026 at 04:23 AM UTC

17 products affected across 2 vendorsAndroidMT6885MT6877

Using MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797 by MediaTek, Inc.?

Get instant alerts when new vulnerabilities affect MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8185, MT8789, MT8791, MT8797 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.4

Exploit prediction

EPSS 0.1%

Description

In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05857289.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

10.0 11.0

mediatek-mt6781 (environment) · mediatek-mt6785 (environment) · mediatek-mt6833 (environment) · mediatek-mt6853 (environment) · mediatek-mt6853t (environment) · mediatek-mt6873 (environment) · mediatek-mt6877 (environment) · mediatek-mt6883 (environment) · mediatek-mt6885 (environment) · mediatek-mt6889 (environment) · mediatek-mt6891 (environment) · mediatek-mt6893 (environment) · mediatek-mt8185 (environment) · mediatek-mt8789 (environment) · mediatek-mt8791 (environment) · mediatek-mt8797 (environment)

MT6781 · MediaTekdevice

80%

All versions

MT6785 · MediaTekdevice

80%

All versions

MT6833 · MediaTekdevice

80%

All versions

MT6853 · MediaTekdevice

80%

All versions