Skip to content
OpenAdvisories
Unscored CVE-2022-20103 EUVD-2022-25363GHSA-pcgc-4jj5-q566

In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure w…

Published May 3, 2022 · Updated Aug 3, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT689

Description

In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06383944; Issue ID: ALPS06282684.

Affected products

VendorProductAffectedFixed
MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT689 Android 11.0, 12.0 —

References