Yu Pan

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** A elevation of privilege vulnerability exists in the MediaTek accessory detector driver. This issue affects Android products. **Recommendations** For Android kernel, apply the fix referenced by Android ID A-36136137 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** A elevation of privilege issue exists in the MediaTek mmc driver, affecting Android. **Recommendations** For Android kernel, apply the fix referenced by Android ID: A-36274676 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** The issue is related to insufficient access control in the MediaTek lastbus component of the Android operating system. It allows a remote attacker to elevate their privileges. **Recommendations** For Android kernel, apply the fix referenced by Android ID: A-36731602 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** The issue is related to an elevation of privilege vulnerability in the MediaTek accessory detector driver, which is associated with insufficient access control. This could allow a remote attacker to elevate their privileges. **Recommendations** For Android kernel, consider restricting access to the MediaTek accessory detector driver until a patch is available. As a temporary workaround, disabling the vulnerable driver may help minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** The issue is related to an elevation of privilege vulnerability in the MediaTek accessory detector driver, which is associated with insufficient access control. This could allow a remote attacker to elevate their privileges. **Recommendations** For Android kernel, consider restricting access to the MediaTek accessory detector driver until a patch is available. As a temporary workaround, disabling the vulnerable driver may help minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** The issue is related to a lack of access control in the MediaTek command queue driver of the Android operating system. It allows a remote attacker to execute arbitrary code in the context of the kernel by exploiting the vulnerability through a local malicious application. This problem is considered high severity because it first requires compromising a privileged process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.