VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Feb 9, 2022· Updated Jun 17, 2026

CVE-2022-20034

CVE-2022-20034

Description

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160806.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Google/Android
    cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
  • Mediatek/Preloader XFLASHllm-fuzzy
  • MediaTek, Inc./MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6799, MT6833, MT6853, MT6873, MT6875, MT6877, MT6885, MT6891, MT6893v5
    Range: Android 11.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.