CVE-2020-0069
No fix known ExploitedEPSS 1%CVSS 7.8
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
Products: google android, huawei berkeley-l09_firmware, huawei columbia-al10b_firmware, huawei columbia-l29d_firmware, huawei columbia-tl00b_firmware, huawei columbia-tl00d_firmware, huawei cornell-al00a_firmware, huawei cornell-tl10b_firmware, huawei dura-al00a_firmware, huawei honor_20_pro_firmware, huawei y6_2019_firmware, huawei nova_3_firmware, huawei nova_4_firmware, huawei honor_8a_firmware, huawei honor_view_20_firmware, huawei jakarta-al00a_firmware, huawei katyusha-al00a_firmware, huawei katyusha-al10a_firmware, huawei madrid-al00a_firmware, huawei paris-l29b_firmware, huawei princeton-al10b_firmware, huawei sydney-al00_firmware, huawei sydney-tl00_firmware, huawei sydneym-al00_firmware, huawei tony-al00b_firmware, huawei tony-tl00b_firmware, huawei yale-al00a_firmware, huawei yale-l21a_firmware, huawei yalep-al10b_firmware