CVE-2022-20047

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917489; Issue ID: ALPS05917489.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
MediaTek, Inc.MT5816, MT5835, MT6885, MT6893, MT9900, MT9901, MT9950, MT9969, MT9970, MT9980Android 10.0, 11.0, 12.0

References

Timeline

Published
Mar 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-200487.8In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiCVE-2022-200496.7In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege withCVE-2022-20057.5AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow anCVE-2022-200506.7In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilCVE-2022-200515.5In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial oCVE-2022-200526.5In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System executioCVE-2022-200537.8In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilCVE-2022-200547.8In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilegeCVE-2022-200556.8In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200566.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200576.5In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with SystemCVE-2022-200586.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,
CVE-2022-20047: High severity, CVSS 7.8 | Vulnix