CVE-2022-26430

EPSS 0.1%
Veröffentlicht 01.08.2022 14:15:09
Zuletzt bearbeitet 21.11.2024 06:53:55
Erkennungen
Login

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032521; Issue ID: ALPS07032521.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 2 Referenzen 4

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version 11.0

   Mediatek ≫ Mt6833 Version -
   Mediatek ≫ Mt6853 Version -
   Mediatek ≫ Mt6873 Version -
   Mediatek ≫ Mt6877 Version -
   Mediatek ≫ Mt6879 Version -
   Mediatek ≫ Mt6885 Version -
   Mediatek ≫ Mt6893 Version -
   Mediatek ≫ Mt6895 Version -
   Mediatek ≫ Mt6983 Version -
   Mediatek ≫ Mt8185 Version -
   Mediatek ≫ Mt8321 Version -
   Mediatek ≫ Mt8385 Version -
   Mediatek ≫ Mt8532 Version -
   Mediatek ≫ Mt8666 Version -
   Mediatek ≫ Mt8675 Version -
   Mediatek ≫ Mt8765 Version -
   Mediatek ≫ Mt8766 Version -
   Mediatek ≫ Mt8768 Version -
   Mediatek ≫ Mt8786 Version -
   Mediatek ≫ Mt8788 Version -
   Mediatek ≫ Mt8789 Version -
   Mediatek ≫ Mt8791 Version -
   Mediatek ≫ Mt8797 Version -

Google ≫ Android Version 12.0

Yoctoproject ≫ Yocto Version 3.1

Yoctoproject ≫ Yocto Version 3.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.01

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

https://corp.mediatek.com/product-security-bulletin/August-2022

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-26430

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-26430

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-26430

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-26430