PT-2023-14128 · Google · Android Kernel

CVE-2022-42498

·

Publicado

2023-03-24

·

Atualizado

2023-03-28

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android kernel
Description The issue is related to a missing bounds check in Pixel cellular firmware, which could lead to an out of bounds write. This might result in remote code execution without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations For Android kernel, consider applying a patch that includes a bounds check to prevent out of bounds write. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-42498

Produtos afetados

Android Kernel