First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-20071

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In ccu, there is a possible escalation of privilege due to a missing certificate validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06183315; Issue ID: ALPS06183315.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
MediaTek, Inc.	MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8797	Android 11.0, 12.0

References

https://corp.mediatek.com/product-security-bulletin/April-2022Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/April-2022Vendor Advisory

Timeline

Published: Apr 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-200726.7In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to loc CVE-2022-200736.6In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, fo CVE-2022-200746.6In preloader (partition), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv CVE-2022-200756.7In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exe CVE-2022-200764.4In ged, there is a possible memory corruption due to an incorrect error handling. This could lead to local information disclosure with Syste CVE-2022-200776.4In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System executio CVE-2022-200786.4In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System executio CVE-2022-200794.4In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure w CVE-2022-20088.8Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2022-200806.4In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execu CVE-2022-200815.9In A-GPS, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclos CVE-2022-200827.0In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional exec