PT-2022-14797 · Google · Android Kernel
CVE-2022-20590
·
Published
2022-12-16
·
Updated
2022-12-21
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Android kernel
Description
The issue is related to improper input validation in the
valid va sec mfc check function of drm access control.c, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.Recommendations
For Android kernel, consider restricting access to the
valid va sec mfc check function as a temporary workaround until a patch is available.Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android Kernel