Login Request a demo
High severity · published Mar 10, 2020
CVE-2020-0069
Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
In wildKEV
7.8
CVSS
1.4%
EPSS
Yes
On KEV
Description
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildYes
CISA KEVListed Nov 3, 2021
Federal remediation dueMay 3, 2022
Ransomware campaign useNot known
Affected products
Which versions
AN
Android · Google
Android kernel · source: vendor, NVD
BF
Berkeley-l09 Firmware · Huawei
before 10.0.0.177\(c10e3r1p4\) · source: NVD
CF
Columbia-al10b Firmware · Huawei
before 10.0.0.178\(c00e178r1p4\) · source: NVD
CF
Columbia-l29d Firmware · Huawei
before 10.0.0.177\(c10e4r1p4\); before 10.0.0.177\(c432e3r1p4\) · source: NVD
CF
Columbia-tl00b Firmware · Huawei
before 10.0.0.178\(c01e178r1p4\) · source: NVD
CF
Columbia-tl00d Firmware · Huawei
before 10.0.0.178\(c01e178r1p4\) · source: NVD
CF
Cornell-al00a Firmware · Huawei
before 9.1.0.340\(c00e333r1p1t8\) · source: NVD
CF
Cornell-tl10b Firmware · Huawei
before 9.1.0.340\(c01e333r1p1t8\) · source: NVD
DF
Dura-al00a Firmware · Huawei
before 1.0.0.190\(c00\) · source: NVD
H2
Honor 20 Pro Firmware · Huawei
before 10.0.0.194\(c636e3r3p1\); before 10.0.0.202\(c10e3r3p2\) · source: NVD
H8
Honor 8a Firmware · Huawei
before 9.1.0.291\(c185e3r4p1\); before 9.1.0.291\(c432e5r2p1\); before 9.1.0.291\(c636e4r4p1\); before 9.1.0.297\(c605e4r4p2\) · source: NVD
HV
Honor View 20 Firmware · Huawei
before 10.0.0.198\(c432e10r3p4\); before 10.0.0.200\(c185e3r3p3\); before 10.0.0.201\(c10e5r4p3\) · source: NVD
Affected product
AN
Android
Google
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-0069
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-0069
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://source.android.com/security/bulletin/2020-03-01
x_refsource_CONFIRM
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-mtk-en
More from Android
9.6
CVE-2020-16010
Google Chrome for Android UI Heap Buffer Overflow Vulnerability
8.8
CVE-2026-58704
Google Pixel Improper Authorization Vulnerability
8.8
CVE-2025-48543
Android Runtime Use-After-Free Vulnerability
8.4
CVE-2025-48595
Android Framework Integer Overflow Vulnerability
7.8
CVE-2025-48572
Android Framework Privilege Escalation Vulnerability