发布日期：2022-01-04
更新日期：2022-03-03

受影响系统：

MediaTek MediaTek Chipsets MT8169
MediaTek MediaTek Chipsets MT6893
MediaTek MediaTek Chipsets MT6889
MediaTek MediaTek Chipsets MT6885
MediaTek MediaTek Chipsets MT6883
MediaTek MediaTek Chipsets MT6877
MediaTek MediaTek Chipsets MT6873
MediaTek MediaTek Chipsets MT6853T
MediaTek MediaTek Chipsets MT6853
MediaTek MediaTek Chipsets MT6833
MediaTek MediaTek Chipsets MT6785
MediaTek MediaTek Chipsets MT6781
MediaTek MediaTek Chipsets MT6779
MediaTek MediaTek Chipsets MT6771
MediaTek MediaTek Chipsets MT6768
MediaTek MediaTek Chipsets MT6765
MediaTek MediaTek Chipsets MT6763
MediaTek MediaTek Chipsets MT6762
MediaTek MediaTek Chipsets MT6761
MediaTek MediaTek Chipsets MT6757CH
MediaTek MediaTek Chipsets MT6757CD
MediaTek MediaTek Chipsets MT6757C
MediaTek MediaTek Chipsets MT6757
MediaTek MediaTek Chipsets MT6739

描述：

---

CVE(CAN) ID: CVE-2022-20015

MediaTek Chipsets是中国联发科（Mediatek）的多款芯片。
MediaTek Chipsets存在信息泄露漏洞，该漏洞源于kd_camera_hw驱动程序中存在由于数据未初始化导致的信息泄露。具备系统执行权限的攻击者可利用该漏洞导致本地信息泄露。

<*链接：https://corp.mediatek.com/product-security-bulletin/January-2022#CVE_2022_20015
*>

建议：

---

厂商补丁：

MediaTek
--------
MediaTek已经为此发布了一个安全公告（CVE-2022-20015）以及相应补丁:
CVE-2022-20015：January 2022 Product Security Bulletin
链接：https://corp.mediatek.com/product-security-bulletin/January-2022#CVE_2022_20015

浏览次数：2190
严重程度：0（网友投票）