cve/2022/CVE-2022-20106.md

### [CVE-2022-20106](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-20106)
![](https://img.shields.io/static/v1?label=Product&message=MT9011%2C%20MT9215%2C%20MT9216%2C%20MT9220%2C%20MT9221%2C%20MT9255%2C%20MT9256%2C%20MT9266%2C%20MT9269%2C%20MT9285%2C%20MT9286%2C%20MT9288%2C%20MT9600%2C%20MT9602%2C%20MT9610%2C%20MT9611%2C%20MT9612%2C%20MT9613%2C%20MT9615%2C%20MT9617%2C%20MT9629%2C%20MT9630%2C%20MT9631%2C%20MT9632%2C%20MT9636%2C%20MT9638%2C%20MT9639%2C%20MT9650%2C%20MT9652%2C%20MT9666%2C%20MT9669%2C%20MT9670%2C%20MT9675%2C%20MT9685%2C%20MT9686%2C%20MT9688&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Elevation%20of%20Privilege&color=brighgreen)

### Description

In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330460; Issue ID: DTV03330460.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/pokerfacett/MY_CVE_CREDIT