CVEvulnerability
CVE-2022-20075
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-04-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-190
Description
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05838808; Issue ID: ALPS05838808.
Affected configurations
• google android 10.0
• google android 11.0
• google android 12.0
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://corp.mediatek.com/product-security-bulletin/April-2022 Vendor Advisory
- https://corp.mediatek.com/product-security-bulletin/April-2022 Vendor Advisory