PT-2023-12640 · Google+1 · Android+1

CVE-2022-20235

·

Publicado

2023-01-24

·

Atualizado

2023-08-08

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Android SoC versions prior to DDK 1.18
Description The PowerVR GPU kernel driver has a flaw in its cache subsystem, specifically with the "Information Page" that can be written to by user-space programs prior to DDK 1.18, leading to memory corruption issues.
Recommendations For Android SoC versions prior to DDK 1.18, update to DDK 1.18 or later to resolve the issue. As a temporary workaround, consider restricting access to the GPU kernel driver to minimize the risk of exploitation.

Correção

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-20235

Produtos afetados

Android
Powervr-Gpu