CVE-2022-20107

EPSS 0.05%
Published 03.05.2022 21:15:09
Last modified 21.11.2024 06:42:10
Source security@mediatek.com
CVE-Watchlists
Login
Open
Login

In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330673; Issue ID: DTV03330673.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Android Version9.0

   Mediatek ≫ Mt9011 Version-
   Mediatek ≫ Mt9215 Version-
   Mediatek ≫ Mt9216 Version-
   Mediatek ≫ Mt9220 Version-
   Mediatek ≫ Mt9221 Version-
   Mediatek ≫ Mt9255 Version-
   Mediatek ≫ Mt9256 Version-
   Mediatek ≫ Mt9266 Version-
   Mediatek ≫ Mt9269 Version-
   Mediatek ≫ Mt9285 Version-
   Mediatek ≫ Mt9286 Version-
   Mediatek ≫ Mt9288 Version-
   Mediatek ≫ Mt9600 Version-
   Mediatek ≫ Mt9602 Version-
   Mediatek ≫ Mt9610 Version-
   Mediatek ≫ Mt9611 Version-
   Mediatek ≫ Mt9612 Version-
   Mediatek ≫ Mt9613 Version-
   Mediatek ≫ Mt9615 Version-
   Mediatek ≫ Mt9617 Version-
   Mediatek ≫ Mt9629 Version-
   Mediatek ≫ Mt9630 Version-
   Mediatek ≫ Mt9631 Version-
   Mediatek ≫ Mt9632 Version-
   Mediatek ≫ Mt9636 Version-
   Mediatek ≫ Mt9638 Version-
   Mediatek ≫ Mt9639 Version-
   Mediatek ≫ Mt9650 Version-
   Mediatek ≫ Mt9652 Version-
   Mediatek ≫ Mt9666 Version-
   Mediatek ≫ Mt9669 Version-
   Mediatek ≫ Mt9670 Version-
   Mediatek ≫ Mt9675 Version-
   Mediatek ≫ Mt9685 Version-
   Mediatek ≫ Mt9686 Version-
   Mediatek ≫ Mt9688 Version-

Google ≫ Android Version10.0

Google ≫ Android Version11.0

Linux ≫ Linux Kernel Version4.9

Linux ≫ Linux Kernel Version4.19

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.153

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.4	0.8	3.6	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://corp.mediatek.com/product-security-bulletin/May-2022

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-20107

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-20107

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-20107

EUVD