PT-2022-14769

CVE-2022-20557

·

Published

2022-12-16

·

Updated

2022-12-20

Description by

CVSS 3.1
6.7
Medium
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions Android-13
Description The issue is related to a possible out of bounds read in MessageQueueBase of MessageQueueBase.h due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution privileges. No user interaction is needed for exploitation.
Recommendations For Android version Android-13, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-125: Out-of-bounds Read
Related identifiers
CVE-2022-20557
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com