CVE-2022-20066

MEDIUM

atf - Info Disclosure

Title source: llm

Description

In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171729; Issue ID: ALPS06171729.

References (1)

[Vendor Advisory] https://corp.mediatek.com/product-security-bulletin/May-2022

Scores

CVSS v3 4.4

EPSS 0.0005

EPSS Percentile 15.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-755

Status published

Affected Products (2)

google/android

Timeline

Published Apr 11, 2022

Tracked Since Feb 18, 2026