CVE:CVE-2022-20107
CNNVD:CNNVD-202205-1976
MediaTek 芯片是中国联发科（MediaTek）的MediaTek 的多款芯片。
MediaTek 多款产品存在安全漏洞，该漏洞源于基于堆栈的缓冲区溢出，可能会出现越界写入，攻击者利用该漏洞可导致本地权限升级。以下产品及版本受到影响：MT9011, MT9215, MT9216, MT9220, MT9221, MT9255, MT9256, MT9266, MT9269, MT9285, MT9286, MT9288, MT9600, MT9602, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9629, MT9630, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9666, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688。
solution:Upgrade google android to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade linux linux_kernel to a higher version than 4.9,4.19,and avoid the version 4.9,4.19