CVE-2022-20107
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.7%
In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330673; Issue ID: DTV03330673.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| mediatek | mt9011 | * | cpe:2.3:h:mediatek:mt9011:*:*:*:*:*:*:*:* |
| mediatek | mt9215 | * | cpe:2.3:h:mediatek:mt9215:*:*:*:*:*:*:*:* |
| mediatek | mt9216 | * | cpe:2.3:h:mediatek:mt9216:*:*:*:*:*:*:*:* |
| mediatek | mt9220 | * | cpe:2.3:h:mediatek:mt9220:*:*:*:*:*:*:*:* |
| mediatek | mt9221 | * | cpe:2.3:h:mediatek:mt9221:*:*:*:*:*:*:*:* |
| mediatek | mt9255 | * | cpe:2.3:h:mediatek:mt9255:*:*:*:*:*:*:*:* |
| mediatek | mt9256 | * | cpe:2.3:h:mediatek:mt9256:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "MT9011, MT9215, MT9216, MT9220, MT9221, MT9255, MT9256, MT9266, MT9269, MT9285, MT9286, MT9288, MT9600, MT9602, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9629, MT9630, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9666, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688",
"vendor": "MediaTek, Inc.",
"versions": [
{
"status": "affected",
"version": "Android 9.0, 10.0, 11.0 or Linux Kernel 4.9, 4.19"
}
]
}
]Social References
More
Related
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.7%