Main Vulnerability Database Vulnerabilities #VU72931

Information Exposure in MediaTek products - CVE-2021-0680

Published: March 7, 2023

Vulnerability identifier: #VU72931

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-0680

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due to a missing permission check within system properties. A local application can gain access to sensitive information.

MT6765
MT8183
MT8173
MT8168
MT8167
MT6771
MT6768
MT6580
MT6763
MT6762
MT6761
MT6757CD
MT6755S
MT6750S
MT6739
MT6735
MT6785
MT6779

Install security update from vendor's website.