10

CVE-2022-20140

EPSS 8.79%
Veröffentlicht 15.06.2022 14:15:11
Zuletzt bearbeitet 21.11.2024 06:42:13
Erkennungen
Login

In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-227618988

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 12.0

Google ≫ Android Version 12.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.79%	0.947

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://source.android.com/security/bulletin/2022-06-01

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-20140

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-20140

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-20140

EUVD