← Database

CVE-2022-20034

MEDIUM CVSS: 6.8 Published: 2022-02-09 Modified: 2026-06-17

Description

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160806.

Affected Platforms

Mediatek Mt6763Mediatek Mt6779Mediatek Mt6739Mediatek Mt6893Mediatek Mt6873Google AndroidMediatek Mt6769Mediatek Mt6885Mediatek Mt6833Mediatek Mt6853

Weakness Type

CWE-295

References