In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published: 2020-03-10T19:56:37

Updated: 2024-08-04T05:47:40.759Z

Reserved: 2019-10-17T00:00:00

Link: CVE-2020-0069

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2020-03-10T20:15:21.947

Modified: 2024-07-25T14:32:59.103

Link: CVE-2020-0069

cve-icon Redhat

No data.