{"cvss":7.8,"datePublished":"2021-11-03","dateUpdated":"2021-11-03","description":"Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain \"AbstractEmu.\"","dueDate":"2022-05-03","id":"CVE-2020-0069","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0069","product":"Multiple Chipsets","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","vendor":"MediaTek"}