---
id: 4460
title: "CVE-2020-0069: Autopsy of the Most Stable MediaTek Rootkit"
cve: CVE-2020-0069
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/cve-2020-0069-autopsy-of-the-most-stable-mediatek-rootkit.html"
published_at: "2020-03-23T23:00:00Z"
tags: ["privilege-escalation", "android", "kernel", "rootkit", "mediatek", "cve-2020-0069"]
phying_url: "https://phying.com/item/4460"
lang: en
---

# CVE-2020-0069: Autopsy of the Most Stable MediaTek Rootkit

## Summary

Autopsy of CVE-2020-0069 in MediaTek's CMDQ driver, which allowed local attackers to read and write physical memory for privilege escalation and enabled the long-lived mtk-su rooting tool.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2020-0069
- **Published:** 2020-03-23T23:00:00Z
- **Original:** https://blog.quarkslab.com/cve-2020-0069-autopsy-of-the-most-stable-mediatek-rootkit.html
- **Phying News:** https://phying.com/item/4460