In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
Connections 58
has cited scope1 retained · stored CVE-2020-0069 → n/a · Androida20fc7d4-851e-4f15-bd3b-dc3774a0a518
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · yale-l21a612594b0-52bd-435a-8465-cd376c50a90e
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · nova_4f3d3d91b-af07-4ca8-88f0-643ba9ffd2b9
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · sydney-al00662564ef-4c96-4675-af33-24284755d9f1
has environmental constraint3 retained · stored CVE-2020-0069 → huawei · honor_view_205ea9e478-1bcc-40b8-9492-6ecd5a8786876c580753-c223-4ef5-b5f3-d11f158aedb19748b270-057c-4720-96d4-1f157c928226
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · tony-al00b4ef8e711-8a95-4d31-9b55-c96dcf6bb145
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · paris-l29b8e2afc15-60c1-4e8c-ad80-adc875020802
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · berkeley-l09c13ba97b-adcb-45ff-a9ae-5e232cabbf6a
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · sydneym-al00ab02151e-087e-4550-abe0-52df5d3c5119
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · yalep-al10bd2e83174-3fce-4813-b50f-f0b6a96d2b37
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · cornell-al00a10bc342f-8bd7-4a0a-808a-f921239ece2b
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · madrid-al00a157ed3ef-5bf7-4cfd-b9f5-117bd3f27972
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · jakarta-al00acf17fc07-32ac-40ad-b1f4-7cada0c9b11e
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · sydney-tl00fda90e9f-7242-4fcd-b54c-4905bb4e6827
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · katyusha-al10a419d8da3-4179-41ec-9f5f-342132827214
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · yale-al00a5db26716-3c76-40b4-b389-b6f302a4264c
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · tony-tl00bd8ae06a0-202b-4738-829e-c891ca2586e1
has environmental constraint4 retained · stored CVE-2020-0069 → huawei · honor_8a0de5deaf-05c1-4945-af8a-7934aceed5af205d1a76-f140-46ef-b296-277800b310ca2ff32389-a30c-49e4-a6c7-5f5dd2c6eb1ec5220225-2016-4b0d-bad4-4845e3361a66
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · princeton-al10bf7e38932-ccb9-4583-9f2b-41e176fe2b3b
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · cornell-tl10b4a087a33-efd8-4412-a34a-caeeedfa011a
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · columbia-tl00de0ef77c2-d2a5-4c21-956d-e58958f26916
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · columbia-al10b43f41184-d68c-4130-b8d5-5fbbb64fde2e
has environmental constraint4 retained · stored CVE-2020-0069 → huawei · y6_20193762a89a-62cc-4df3-b7a8-1952efeeb2cc44282456-508b-47a5-a025-71d4b0b996d2d870ba9c-a1e2-4e41-8924-c51450c03ebfd8e0f743-e6b8-4a91-a905-1a8f7393d9a4
has environmental constraint2 retained · stored CVE-2020-0069 → huawei · columbia-l29d476c097f-9545-4436-a5a5-08a4bc8e1cdbd14ac85e-bb40-461e-a01c-f0bec29ec7b1
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · nova_3e1d2fb18-529e-4b8b-af1b-d6b47e8eee78
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · dura-al00a5cfd0942-f316-471a-85f1-37bc1cf7e532
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · columbia-tl00bb26997e3-f77b-48a5-92e7-09e22e520532
has environmental constraint1 retained · stored CVE-2020-0069 → huawei · katyusha-al00a9f4cbd32-8e03-4945-bcfc-a942c9905c75
has environmental constraint2 retained · stored CVE-2020-0069 → huawei · honor_20_pro397cd676-df50-4dc6-af92-d6c05e7c2612fa1ec546-5514-4df3-8bf7-e1754e738f73
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · princeton-al10b_firmware3010fe72-00c4-42df-bf4f-5dcbea1d9738
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · katyusha-al10a_firmwareb16631c7-b3ed-4dc6-a4ff-5eb194fe3fd6
has vulnerable target scope3 retained · stored CVE-2020-0069 → huawei · honor_view_20_firmware060fb85c-c734-4aa4-9e7d-dcdaf35c9ec182fe7c05-4814-4973-9523-676e82e440b890fe6e1f-b114-4b87-8c46-dbf9a3d1c954
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · tony-tl00b_firmwareff641b82-79c2-4f27-9aee-44f0935db12b
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · nova_3_firmware7260927d-ad43-44c9-9df5-562b894e8888
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · paris-l29b_firmware865f7294-1879-46fe-ad30-4ad26059fa3a
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · katyusha-al00a_firmwareb59413fc-caf7-4399-9e94-c49191d1dce0
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · sydneym-al00_firmware887d3147-29aa-48eb-a3aa-9f1633844ebc
has vulnerable target scope2 retained · stored CVE-2020-0069 → huawei · honor_20_pro_firmware19d65a94-9b2d-4b6c-9223-6d9655a31f1155c705d9-9ffb-4333-9212-ec5e84519d46
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · yalep-al10b_firmwaree7408059-25fe-425d-9181-df2414ef74eb
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · sydney-tl00_firmwarec9fdb0bd-9531-46a1-89fc-9388274d628c
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · cornell-al00a_firmware0a42aa1e-50bd-437f-9c37-85d2fd11905c
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · columbia-al10b_firmwaree26c02ae-35d5-4c54-964f-c3414e65eece
has vulnerable target scope4 retained · stored CVE-2020-0069 → huawei · honor_8a_firmware353e4302-ed08-418d-baf0-3c03bbb0357fa7d8ec37-698a-4088-a840-a849ffbaf015cb4c718c-d85d-4c33-ae1a-9fd0d253b4dfea83f0dd-943c-49c2-a418-d15e1af9a87a
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · berkeley-l09_firmwareb032e531-df73-4f5b-b12a-564888a665a9
has vulnerable target scope1 retained · stored CVE-2020-0069 → google · android1550ae92-a0f5-4158-bcc2-2df6d1deb249
has vulnerable target scope4 retained · stored CVE-2020-0069 → huawei · y6_2019_firmware01272b51-9907-4906-9e39-dcbf3e8925af3a977d20-64dc-40f7-ab1f-53f5434c85bd78e3ce85-8868-43fe-a13e-f547ee71ec55ec59c8a3-304e-4a87-80a9-e6030a972d7d
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · tony-al00b_firmware4bde8643-8047-415e-a263-db04beb2a373
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · columbia-tl00d_firmware18abe2bb-cee7-4a07-9d97-4b47c756db50
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · columbia-tl00b_firmwareaff83357-d250-4a04-9f92-05d417a99315
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · yale-al00a_firmwareeaa59803-057a-4617-bab4-8950239d852b
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · jakarta-al00a_firmware6c6ae228-29c5-4ed8-bc62-3419051ff9d6
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · cornell-tl10b_firmware2658459c-fb2a-4971-8934-744d227789b8
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · nova_4_firmware28fca6dc-b7dd-46c5-a504-83fc94efc584
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · madrid-al00a_firmware74a25cb3-1c07-4dbb-9150-1f813ec91864
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · yale-l21a_firmwarecea4ad9f-3b01-4ebf-9598-929ab01faadc
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · sydney-al00_firmware83a29645-818c-4798-8e08-80a534f6cb06
has vulnerable target scope1 retained · stored CVE-2020-0069 → huawei · dura-al00a_firmware008dd3ae-a542-4cfc-a357-3c014b765363
has vulnerable target scope2 retained · stored CVE-2020-0069 → huawei · columbia-l29d_firmware11026114-4fe1-473c-8008-04a061196f207ed73aaf-4896-41ef-94ce-a69c211c41c0