PT-2022-14413
CVE-2022-20183
·
تاريخ النشر
2022-06-15
·
تاريخ التحديث
2022-06-24
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to a missing bounds check in the hypx create blob dmabuf function of faceauth hypx.c, which could lead to a possible out of bounds write. This might result in local escalation of privilege, requiring System execution privileges. No user interaction is needed for exploitation.
Recommendations
For Android kernel, apply a patch that includes a bounds check in the hypx create blob dmabuf function to prevent out of bounds writes.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾