CVE-2022-21770

MEDIUM

6.7

CVSS Score

Published: July 6, 2022 at 01:06 PM UTC

Updated: June 17, 2026 at 04:26 AM UTC

10 products affected across 2 vendorsAndroidMT6877MT6893

Using MT6781, MT6877, MT6879, MT6893, MT6895, MT6983, MT8791, MT8797, MT8798 by MediaTek, Inc.?

Get instant alerts when new vulnerabilities affect MT6781, MT6877, MT6879, MT6893, MT6895, MT6983, MT8791, MT8797, MT8798 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.1%

Description

In sound driver, there is a possible information disclosure due to symlink following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558663; Issue ID: ALPS06558663.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

11.0 12.0

mediatek-mt6781 (environment) · mediatek-mt6877 (environment) · mediatek-mt6879 (environment) · mediatek-mt6893 (environment) · mediatek-mt6895 (environment) · mediatek-mt6983 (environment) · mediatek-mt8791 (environment) · mediatek-mt8797 (environment) · mediatek-mt8798 (environment)

MT6781 · MediaTekdevice

80%

All versions

MT6877 · MediaTekdevice

80%

All versions

MT6879 · MediaTekdevice

80%

All versions

MT6893 · MediaTekdevice

80%

All versions