2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2022-20107" ,
"sourceIdentifier" : "security@mediatek.com" ,
"published" : "2022-05-03T21:15:09.213" ,
2024-11-23 15:12:23 +00:00
"lastModified" : "2024-11-21T06:42:10.187" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330673; Issue ID: DTV03330673."
} ,
{
"lang" : "es" ,
"value" : "En el servicio de subt\u00edtulos, se presenta un posible bloqueo de la aplicaci\u00f3n debido a un desbordamiento de enteros. Esto podr\u00eda conllevar a una denegaci\u00f3n de servicio local con privilegios de ejecuci\u00f3n System necesarios. No es requerida una interacci\u00f3n del usuario para su explotaci\u00f3n. ID del parche: DTV03330673; ID de Incidencia: DTV03330673"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" ,
2024-11-23 15:12:23 +00:00
"baseScore" : 4.4 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
2024-11-23 15:12:23 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 0.8 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C" ,
2024-11-23 15:12:23 +00:00
"baseScore" : 4.9 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "LOCAL" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
2024-11-23 15:12:23 +00:00
"availabilityImpact" : "COMPLETE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 6.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-190"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9011:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CEE06B45-7F23-4EB5-9885-4FCA0FC0D5C5"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9215:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "726E51E6-E765-4973-A0D2-5CC746CACFB9"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9216:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B45803F-1AD2-47C8-BB9B-276628A0D605"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9220:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6FB0DB25-6CFF-4688-B423-6CC0252C3B59"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9221:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B9E90123-D7DC-4C68-B2F9-27DCEDED2FC6"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9255:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D9C5A33A-7B04-4E14-A268-A717CD2420DA"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9256:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FAC84405-17EE-4C25-8477-317F2A6A095F"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9266:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "85C42802-293E-448B-A059-DFDEF1D97EC2"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9269:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F19E7E64-721E-436B-B879-D1EDE5EFF84C"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9285:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7A7E7D3C-436A-4068-99F1-AFEB34989F69"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9286:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4CEEB709-8C7B-48AF-B359-9CE9C68790D5"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9288:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6081A92B-4361-462A-9F7F-570AC7256CDB"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1567AAB0-8C08-4A7C-A5D3-4F057C7F6871"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9602:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "49ED757E-42DD-4176-B216-915EFD8E2F40"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9610:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6BA3286D-A136-4EB2-A181-6EF8A556EFDF"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9611:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A9F24C9-2A69-44D9-A16B-E4187230F984"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9612:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BD04E099-75F4-48F6-BB8C-28A5D6FB8F60"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9613:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E92602E3-1B1B-4683-801D-D151919C63EE"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9615:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0AF44498-001B-4A51-AB32-EBC206B14741"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9617:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F2E6E130-9F65-482B-AF8B-97DA81FCE19E"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9629:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "47E5EE7B-1208-4007-AF87-6DC309FFE312"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9630:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9FE404F4-FFAE-4646-9234-15230F0577F1"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9631:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA834B63-F689-48BA-84E6-500351990BFD"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9632:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EF1B3B37-22C4-42F4-8264-07512619D706"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9636:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "11B89606-5FD7-4513-984A-16217D37BF4B"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9638:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "76F4FC23-534B-449A-8344-1F13AE9C8C57"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9639:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "392C9A58-EAB1-44B5-B189-98C68CC23199"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9650:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2D0EF507-52A0-45D1-AC26-97F765E691FC"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9652:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C826242C-440E-4D85-841E-570E9C69777C"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9666:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1A4E9A32-6267-4AB3-B9A9-BBC79ED2F343"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9669:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8531FD76-C0C1-45FE-8FDC-26402FF8BFA5"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9670:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FC3E19E5-4DD7-4ECB-A7AE-F501A152078E"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9675:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "046B7E06-8C40-4D37-8D10-4816E51CA143"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9685:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CFD9AD54-9F0F-414B-8936-3A981657D6AB"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9686:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B429106-36BE-42F2-8D05-FB9EF00BDFBA"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9688:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F7D78E76-6A3B-4736-B7E7-C9032CDA845B"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "27B10B33-5F64-4039-8351-694A7AB6E4E4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:4.19:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "513F8951-3099-444A-9755-C3A75720EFD2"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9011:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CEE06B45-7F23-4EB5-9885-4FCA0FC0D5C5"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9215:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "726E51E6-E765-4973-A0D2-5CC746CACFB9"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9216:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B45803F-1AD2-47C8-BB9B-276628A0D605"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9220:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6FB0DB25-6CFF-4688-B423-6CC0252C3B59"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9221:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B9E90123-D7DC-4C68-B2F9-27DCEDED2FC6"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9255:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D9C5A33A-7B04-4E14-A268-A717CD2420DA"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9256:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FAC84405-17EE-4C25-8477-317F2A6A095F"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9266:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "85C42802-293E-448B-A059-DFDEF1D97EC2"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9269:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F19E7E64-721E-436B-B879-D1EDE5EFF84C"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9285:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7A7E7D3C-436A-4068-99F1-AFEB34989F69"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9286:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4CEEB709-8C7B-48AF-B359-9CE9C68790D5"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9288:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6081A92B-4361-462A-9F7F-570AC7256CDB"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1567AAB0-8C08-4A7C-A5D3-4F057C7F6871"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9602:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "49ED757E-42DD-4176-B216-915EFD8E2F40"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9610:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6BA3286D-A136-4EB2-A181-6EF8A556EFDF"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9611:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A9F24C9-2A69-44D9-A16B-E4187230F984"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9612:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BD04E099-75F4-48F6-BB8C-28A5D6FB8F60"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9613:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E92602E3-1B1B-4683-801D-D151919C63EE"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9615:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0AF44498-001B-4A51-AB32-EBC206B14741"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9617:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F2E6E130-9F65-482B-AF8B-97DA81FCE19E"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9629:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "47E5EE7B-1208-4007-AF87-6DC309FFE312"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9630:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9FE404F4-FFAE-4646-9234-15230F0577F1"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9631:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA834B63-F689-48BA-84E6-500351990BFD"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9632:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EF1B3B37-22C4-42F4-8264-07512619D706"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9636:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "11B89606-5FD7-4513-984A-16217D37BF4B"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9638:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "76F4FC23-534B-449A-8344-1F13AE9C8C57"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9639:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "392C9A58-EAB1-44B5-B189-98C68CC23199"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9650:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2D0EF507-52A0-45D1-AC26-97F765E691FC"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9652:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C826242C-440E-4D85-841E-570E9C69777C"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9666:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1A4E9A32-6267-4AB3-B9A9-BBC79ED2F343"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9669:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8531FD76-C0C1-45FE-8FDC-26402FF8BFA5"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9670:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FC3E19E5-4DD7-4ECB-A7AE-F501A152078E"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9675:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "046B7E06-8C40-4D37-8D10-4816E51CA143"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9685:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CFD9AD54-9F0F-414B-8936-3A981657D6AB"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9686:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B429106-36BE-42F2-8D05-FB9EF00BDFBA"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:mediatek:mt9688:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F7D78E76-6A3B-4736-B7E7-C9032CDA845B"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://corp.mediatek.com/product-security-bulletin/May-2022" ,
"source" : "security@mediatek.com" ,
"tags" : [
"Vendor Advisory"
]
2024-11-23 15:12:23 +00:00
} ,
{
"url" : "https://corp.mediatek.com/product-security-bulletin/May-2022" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}