Vulnerability Description
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Android | - | |
| Huawei | Berkeley-L09 Firmware | < 10.0.0.177\(c10e3r1p4\) |
| Huawei | Berkeley-L09 | - |
| Huawei | Columbia-Al10B Firmware | < 10.0.0.178\(c00e178r1p4\) |
| Huawei | Columbia-Al10B | - |
| Huawei | Columbia-L29D Firmware | < 10.0.0.177\(c10e4r1p4\) |
| Huawei | Columbia-L29D | - |
| Huawei | Columbia-Tl00B Firmware | < 10.0.0.178\(c01e178r1p4\) |
| Huawei | Columbia-Tl00B | - |
| Huawei | Columbia-Tl00D Firmware | < 10.0.0.178\(c01e178r1p4\) |
| Huawei | Columbia-Tl00D | - |
| Huawei | Cornell-Al00A Firmware | < 9.1.0.340\(c00e333r1p1t8\) |
| Huawei | Cornell-Al00A | - |
| Huawei | Cornell-Tl10B Firmware | < 9.1.0.340\(c01e333r1p1t8\) |
| Huawei | Cornell-Tl10B | - |
| Huawei | Dura-Al00A Firmware | < 1.0.0.190\(c00\) |
| Huawei | Dura-Al00A | - |
| Huawei | Honor 20 Pro Firmware | < 10.0.0.194\(c636e3r3p1\) |
| Huawei | Honor 20 Pro | - |
| Huawei | Y6 2019 Firmware | < 9.1.0.290\(c185e5r4p1\) |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-mtk-enVendor Advisory
- https://source.android.com/security/bulletin/2020-03-01Vendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-mtk-enVendor Advisory
- https://source.android.com/security/bulletin/2020-03-01Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2020-0069?
CVE-2020-0069 is a vulnerability with a CVSS score of 7.8 (HIGH). In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local es...
How severe is CVE-2020-0069?
CVE-2020-0069 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-0069?
Check the references section above for vendor advisories and patch information. Affected products include: Google Android, Huawei Berkeley-L09 Firmware, Huawei Berkeley-L09, Huawei Columbia-Al10B Firmware, Huawei Columbia-Al10B.