theinfosecnews
theinfosecnews
Subscribe to Daily Digest

CVE-2020-0069

CISA KEV

Published November 3, 2021 · Updated April 3, 2026

high
Official Description+

Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain "AbstractEmu."

Affected Products

VendorProduct
MediaTekMultiple Chipsets

Patch Status

Patch by 2022-05-03

Recommended Actions

  1. Check if your systems use any of the affected products listed above.
  2. Apply vendor patches immediately if available.
  3. This vulnerability is in CISA's Known Exploited Vulnerabilities catalog — prioritize remediation.
  4. Monitor vendor advisories for updates and additional mitigations.
  5. Review logs for indicators of compromise related to CVE-2020-0069.