CVE-2022-20081

CVE	CVE-2022-20081
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-04-11 20:15:00 UTC
Updated	2022-04-18 14:25:00 UTC
Description	In A-GPS, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06461919; Issue ID: ALPS06461919.

Problem Types: CWE-295

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Google	Android	10.0	All	All	All
Operating System	Google	Android	11.0	All	All	All
Operating System	Google	Android	12.0	All	All	All
Hardware	Mediatek	Mt6580	-	All	All	All
Hardware	Mediatek	Mt6735	-	All	All	All
Hardware	Mediatek	Mt6737	-	All	All	All
Hardware	Mediatek	Mt6739	-	All	All	All
Hardware	Mediatek	Mt6753	-	All	All	All
Hardware	Mediatek	Mt6761	-	All	All	All
Hardware	Mediatek	Mt6765	-	All	All	All
Hardware	Mediatek	Mt6768	-	All	All	All
Hardware	Mediatek	Mt6771	-	All	All	All
Hardware	Mediatek	Mt6779	-	All	All	All
Hardware	Mediatek	Mt6781	-	All	All	All
Hardware	Mediatek	Mt6785	-	All	All	All
Hardware	Mediatek	Mt6833	-	All	All	All
Hardware	Mediatek	Mt6853	-	All	All	All
Hardware	Mediatek	Mt6873	-	All	All	All
Hardware	Mediatek	Mt6877	-	All	All	All
Hardware	Mediatek	Mt6879	-	All	All	All
Hardware	Mediatek	Mt6883	-	All	All	All
Hardware	Mediatek	Mt6885	-	All	All	All
Hardware	Mediatek	Mt6889	-	All	All	All
Hardware	Mediatek	Mt6893	-	All	All	All
Hardware	Mediatek	Mt6895	-	All	All	All
Hardware	Mediatek	Mt6983	-	All	All	All
Hardware	Mediatek	Mt8666	-	All	All	All
Hardware	Mediatek	Mt8667	-	All	All	All
Hardware	Mediatek	Mt8675	-	All	All	All

Reference	Source	Link	Tags
April 2022	MISC	corp.mediatek.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.