GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

VAR-202207-0242

Vulnerability from variot - Updated: 2023-12-18 10:53

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; Issue ID: ALPS07044730. MediaTek Inc. is the world's fourth-largest foundry semiconductor company. It is in a leading position in the market of mobile terminals, smart home applications, wireless connection technology and Internet of Things products, with about 1.5 billion units a year End products with built-in MediaTek chips are available all over the world. The vulnerability stems from the concurrent execution of incorrectly synchronized (race condition) shared resources in the GPU

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202207-0242",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "android",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "google",
        "version": "10.0"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "google",
        "version": "11.0"
      },
      {
        "model": "android",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "google",
        "version": "12.0"
      },
      {
        "model": "mt6768 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6768 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6768 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6769 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6769 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6769 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6781 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6781 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6781 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6785 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6785 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6785 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6833 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6833 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6833 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6873 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6873 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6873 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6875 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6875 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6875 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6877 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6877 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6877 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6883 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6883 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6883 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6885 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6885 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6885 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6889 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6889 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6889 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6983 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6983 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6983 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6789 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6789 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6789 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6853 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6853 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6853 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6879 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6879 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6879 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6893 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6893 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6893 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6895 android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6895 android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6895 android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6853t android10.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6853t android11.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      },
      {
        "model": "mt6853t android12.0",
        "scope": null,
        "trust": 0.6,
        "vendor": "mediatek",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-20082"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6785:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6781:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-20082"
      }
    ]
  },
  "cve": "CVE-2022-20082",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.9,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.4,
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "MEDIUM",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.9,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.4,
            "id": "CNVD-2022-88291",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "VULMON",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.9,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 3.4,
            "id": "CVE-2022-20082",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "MEDIUM",
            "trust": 0.1,
            "userInteractionRequired": null,
            "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.0,
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2022-20082",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-88291",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202207-479",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2022-20082",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-20082"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-20082"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; Issue ID: ALPS07044730. MediaTek Inc. is the world\u0027s fourth-largest foundry semiconductor company. It is in a leading position in the market of mobile terminals, smart home applications, wireless connection technology and Internet of Things products, with about 1.5 billion units a year End products with built-in MediaTek chips are available all over the world. The vulnerability stems from the concurrent execution of incorrectly synchronized (race condition) shared resources in the GPU",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-20082"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-20082"
      }
    ],
    "trust": 1.53
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-20082",
        "trust": 2.3
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2022070819",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2022.3342",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202207-479",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-20082",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-20082"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-20082"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ]
  },
  "id": "VAR-202207-0242",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      }
    ],
    "trust": 1.6
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "IoT"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      }
    ]
  },
  "last_update_date": "2023-12-18T10:53:20.844000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patch for Multiple MediaTek Chip GPU Race Condition Vulnerabilities",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchinfo/show/354081"
      },
      {
        "title": "Google Android Repair measures for the competition condition problem loophole",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=200006"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-362",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-20082"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "https://corp.mediatek.com/product-security-bulletin/july-2022"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/google-android-pixel-multiple-vulnerabilities-of-july-2022-38750"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-20082/"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022070819"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2022.3342"
      },
      {
        "trust": 0.6,
        "url": "https://source.android.com/security/bulletin/2022-07-01"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/362.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-20082"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-20082"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-20082"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-20082"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-09-30T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "date": "2022-07-06T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-20082"
      },
      {
        "date": "2022-07-06T14:15:16.907000",
        "db": "NVD",
        "id": "CVE-2022-20082"
      },
      {
        "date": "2022-07-06T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-12-18T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      },
      {
        "date": "2022-07-14T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-20082"
      },
      {
        "date": "2022-07-14T01:22:38.427000",
        "db": "NVD",
        "id": "CVE-2022-20082"
      },
      {
        "date": "2022-07-15T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Multiple MediaTek Chip GPU Race Condition Vulnerabilities",
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-88291"
      }
    ],
    "trust": 0.6
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "competition condition problem",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202207-479"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…