11.0

CVSS 4.6 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

google

CWE-416

NVD

Published: 2022-02-09

Updated: 2022-02-11

Summary

In fb driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05850708; Issue ID: ALPS05850708.

Vulnerable Configurations

Part	Description	Count
OS	Google Google Android 10.0 Google Android 11.0	2
Hardware	Mediatek Mediatek Mt6580 - Mediatek Mt6582 90 - Mediatek Mt6582E - Mediatek Mt6582H - Mediatek Mt6582T - Mediatek Mt6582W - Mediatek Mt6589 - Mediatek Mt6589Td - Mediatek Mt6592 90 - Mediatek Mt6592E - Mediatek Mt6592H - Mediatek Mt6592T - Mediatek Mt6592W - Mediatek Mt6595 - Mediatek Mt6731 - Mediatek Mt6732 - Mediatek Mt6735 - Mediatek Mt6737 - Mediatek Mt6739 - Mediatek Mt6750 - Mediatek Mt6750S - Mediatek Mt6752 - Mediatek Mt6753 - Mediatek Mt6755 - Mediatek Mt6755S - Mediatek Mt6757 - Mediatek Mt6757C - Mediatek Mt6757Cd - Mediatek Mt6757Ch - Mediatek Mt6758 - Mediatek Mt6761 - Mediatek Mt6762 - Mediatek Mt6763 - Mediatek Mt6765 - Mediatek Mt6768 - Mediatek Mt6769 - Mediatek Mt6771 - Mediatek Mt6779 - Mediatek Mt6781 - Mediatek Mt6785 - Mediatek Mt6795 - Mediatek Mt6797 - Mediatek Mt6799 - Mediatek Mt6833 - Mediatek Mt6853 - Mediatek Mt6853T - Mediatek Mt6873 - Mediatek Mt6875 - Mediatek Mt6877 - Mediatek Mt6883 - Mediatek Mt6885 - Mediatek Mt6889 - Mediatek Mt6891 - Mediatek Mt6893 -	54

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://corp.mediatek.com/product-security-bulletin/February-2022