CVE Feed

    Dashboard / CVE / CVE-2020-0069

    CVE-2020-0069

    In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754

    Published:Mar 10, 2020
    Last Modified:Oct 23, 2025
    EPS:Mar 10, 2020
    EPSS Score:0.00848
    CVSS Score:7.8

    CISA Notification

    Description

    In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    May 3, 2022
    1592 days ago
    Alert Date
    Nov 3, 2021
    1773 days ago

    Affected Products

    Vendor
    Google
    Product
    Android
    Vendor
    Huawei
    Product
    Berkeley-l09
    Vendor
    Huawei
    Product
    Berkeley-l09 Firmware
    Vendor
    Huawei
    Product
    Columbia-al10b
    Vendor
    Huawei
    Product
    Columbia-al10b Firmware
    Vendor
    Huawei
    Product
    Columbia-l29d
    Vendor
    Huawei
    Product
    Columbia-l29d Firmware
    Vendor
    Huawei
    Product
    Columbia-tl00b
    Vendor
    Huawei
    Product
    Columbia-tl00b Firmware
    Vendor
    Huawei
    Product
    Columbia-tl00d
    Vendor
    Huawei
    Product
    Columbia-tl00d Firmware
    Vendor
    Huawei
    Product
    Cornell-al00a
    Vendor
    Huawei
    Product
    Cornell-al00a Firmware
    Vendor
    Huawei
    Product
    Cornell-tl10b
    Vendor
    Huawei
    Product
    Cornell-tl10b Firmware
    Vendor
    Huawei
    Product
    Dura-al00a
    Vendor
    Huawei
    Product
    Dura-al00a Firmware
    Vendor
    Huawei
    Product
    Honor 20 Pro
    Vendor
    Huawei
    Product
    Honor 20 Pro Firmware
    Vendor
    Huawei
    Product
    Honor 8a
    Vendor
    Huawei
    Product
    Honor 8a Firmware
    Vendor
    Huawei
    Product
    Honor View 20
    Vendor
    Huawei
    Product
    Honor View 20 Firmware
    Vendor
    Huawei
    Product
    Jakarta-al00a
    Vendor
    Huawei
    Product
    Jakarta-al00a Firmware
    Vendor
    Huawei
    Product
    Katyusha-al00a
    Vendor
    Huawei
    Product
    Katyusha-al00a Firmware
    Vendor
    Huawei
    Product
    Katyusha-al10a
    Vendor
    Huawei
    Product
    Katyusha-al10a Firmware
    Vendor
    Huawei
    Product
    Madrid-al00a
    Vendor
    Huawei
    Product
    Madrid-al00a Firmware
    Vendor
    Huawei
    Product
    Nova 3
    Vendor
    Huawei
    Product
    Nova 3 Firmware
    Vendor
    Huawei
    Product
    Nova 4
    Vendor
    Huawei
    Product
    Nova 4 Firmware
    Vendor
    Huawei
    Product
    Paris-l29b
    Vendor
    Huawei
    Product
    Paris-l29b Firmware
    Vendor
    Huawei
    Product
    Princeton-al10b
    Vendor
    Huawei
    Product
    Princeton-al10b Firmware
    Vendor
    Huawei
    Product
    Sydney-al00
    Vendor
    Huawei
    Product
    Sydney-al00 Firmware
    Vendor
    Huawei
    Product
    Sydney-tl00
    Vendor
    Huawei
    Product
    Sydney-tl00 Firmware
    Vendor
    Huawei
    Product
    Sydneym-al00
    Vendor
    Huawei
    Product
    Sydneym-al00 Firmware
    Vendor
    Huawei
    Product
    Tony-al00b
    Vendor
    Huawei
    Product
    Tony-al00b Firmware
    Vendor
    Huawei
    Product
    Tony-tl00b
    Vendor
    Huawei
    Product
    Tony-tl00b Firmware
    Vendor
    Huawei
    Product
    Y6 2019
    Vendor
    Huawei
    Product
    Y6 2019 Firmware
    Vendor
    Huawei
    Product
    Yale-al00a
    Vendor
    Huawei
    Product
    Yale-al00a Firmware
    Vendor
    Huawei
    Product
    Yale-l21a
    Vendor
    Huawei
    Product
    Yale-l21a Firmware
    Vendor
    Huawei
    Product
    Yalep-al10b
    Vendor
    Huawei
    Product
    Yalep-al10b Firmware

    Exploits

    https://github.com/0xf15h/mtk_suhttps://github.com/quarkslab/CVE-2020-0069_pochttps://github.com/R0rt1z2/AutomatedRoothttps://github.com/TheRealJunior/mtk-su-reverse-cve-2020-0069https://github.com/yanglingxi1993/CVE-2020-0069

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-87583 (CVSS 5.4) — UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attac…
    CVE-2026-87624 (CVSS 4.2) — UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attac…
    CVE-2026-87597 (CVSS 4.8) — UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote atta…
    CVE-2026-87565 (CVSS 6.5) — Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker …
    CVE-2026-87463 (CVSS 4.8) — Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote …
    CVE-2026-87483 (CVSS 6.5) — Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote atta…
    CVE-2026-87555 (CVSS 4.7) — Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker …
    CVE-2026-87486 (CVSS 4) — Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local att…
    CVE-2026-87643 (CVSS 9.6) — Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to pot…
    CVE-2026-87534 (CVSS 9.8) — Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attack…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High