VDB

CVE-2022-21778

CVE-2022-21778 PUBLISHED CVSS 6.699999809265137 MEDIUM

In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06382421; Issue ID: ALPS06382421.

EPSS 0.14% · 3.5th percentile

Risk Scores

CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.14%
3.5th percentile

Affected Products

VendorProductVersions
MediaTek, Inc.MT6771, MT6779, MT6785, MT6853, MT6853T, MT6873, MT6877, MT6885, MT6891, MT6893, MT8168, MT8175, MT8183, MT8365, MT8385, MT8788Android 10.0, 11.0, 12.0
googleandroid11.0, 12.0, 10.0

Timeline

  • Nov 8, 2022 CVE Published
  • Nov 9, 2022 EPSS Score
  • Nov 13, 2022 EPSS Score
  • Dec 22, 2022 EPSS Score
  • Feb 3, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 18, 2023 EPSS Score
  • May 1, 2023 EPSS Score
  • Jun 13, 2023 EPSS Score
  • Sep 7, 2023 EPSS Score
  • Oct 20, 2023 EPSS Score
  • Dec 2, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›