CVE-2022-20088

HIGH

aee driver - Privilege Escalation

Title source: llm

Description

In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06209201; Issue ID: ALPS06209201.

References (1)

[Vendor Advisory] https://corp.mediatek.com/product-security-bulletin/May-2022

Scores

CVSS v3 7.8

EPSS 0.0002

EPSS Percentile 3.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-755

Status published

Affected Products (2)

google/android

Timeline

Published May 03, 2022

Tracked Since Feb 18, 2026