CVEvulnerability

CVE-2022-26435

6.7 MEDIUM Published 2022-08-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-787, CWE-843

Description

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435.

Affected configurations

• google android 11.0 • google android 12.0 • yoctoproject yocto 3.1 • yoctoproject yocto 3.3

Related

Weakness · CWE (2)

  • CWE-787 Out-of-bounds Write weakness
  • CWE-843 Access of Resource Using Incompatible Type weakness

References