CVE-2022-20132

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is caused by an out of bounds read in the hid-lg.c component of the Android kernel due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Android kernel, consider disabling the lg probe function and related functions in hid-lg.c and other USB HID files until a patch is available. Restrict access to the hid-lg.c component to minimize the risk of exploitation. Avoid using malicious USB HID devices with the affected Android kernel until the issue is resolved.