CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-03-10
MediaTek Command Queue Driver Out-of-Bounds Write Local Privilege Escalation (CVE-2020-0069)
[Affected Scope] Android mobile devices powered by MediaTek chipsets running vulnerable kernel versions prior to the March 2020 patch level
[Impact] A local attacker can exploit this vulnerability to gain root privileges and achieve full system compromise without any user interaction
[Mitigation] Apply the March 2020 (or later) Android security patch, or restrict access permissions to the vulnerable '/dev/mtk_cmdq' device node