CVE-2020-0069

A flaw in the Mediatek Command Queue driver allows an unprivileged local user to write data outside of allocated memory boundaries, potentially enabling privilege escalation on Android devices.

The vulnerability exists in ioctl handlers that fail to properly validate user-supplied input before writing to kernel memory, coupled with missing SELinux restrictions. An attacker with local code execution can craft a malicious ioctl request to trigger an out-of-bounds write, bypassing standard privilege restrictions.