Vulnerability

CVE-2022-26469

In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07216598; Issue ID: ALPS07216598.

Impact

Severity (Manufact.)

MEDIUM

Severity (NIST)

7.8

Severity (Android)

N/A

Chipsets

73

Devices

1302

Affected Hardware

NameAlso known asManufacturer
MT6580
MediaTek
MT6735P
MediaTek
MT6735M
MediaTek
MT6735
MediaTek
MT6737
MediaTek
MT6737T
MediaTek
MT6739
MediaTek
MT6761V/WE
Helio A20
MediaTek
MT6761V/WAB
Helio A22
MediaTek
MT6761V/WBB
Helio A22
MediaTek
73 of 73 row(s) shown.

Rows per page

Page 1 of 8

Timeline

Introduced (est):
Jan 1, 2015
Reported:
Unknown
Advisory Published:
Sep 5, 2022
CVE Published:
Sep 6, 2022
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter