← Database

CVE-2022-26429

HIGH CVSS: 7.8 Published: 2022-08-01 Modified: 2026-06-17

Description

In cta, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07025415; Issue ID: ALPS07025415.

Affected Platforms

Mediatek Mt8365Mediatek Mt6855Mediatek Mt8185Mediatek Mt6763Mediatek Mt6779Mediatek Mt8768Mediatek Mt6739Mediatek Mt8786Mediatek Mt6893Mediatek Mt6873

Weakness Type

CWE-862

References