Skip to content
OpenAdvisories
Unscored CVE-2022-20066 EUVD-2022-25326GHSA-c8rx-qghv-2wwg

In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to local information dis…

Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT6580, MT6739, MT6761, MT6765, MT6769, MT6771, MT6785, MT6833, MT6873, MT6875, MT6877, MT6891, MT8168, MT8365, MT8666, MT8667, MT8696, MT8766, MT8768, MT8788

Description

In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171729; Issue ID: ALPS06171729.

Affected products

VendorProductAffectedFixed
MediaTek MT6580, MT6739, MT6761, MT6765, MT6769, MT6771, MT6785, MT6833, MT6873, MT6875, MT6877, MT6891, MT8168, MT8365, MT8666, MT8667, MT8696, MT8766, MT8768, MT8788 Android 11.0, 12.0 —

References