Lucene search

Google_androidCVELIST:CVE-2022-20393

HistorySep 13, 2022 - 7:14 p.m.

CVE-2022-20393

2022-09-1319:14:54

google_android

www.cve.org

textdescriptions.cpp

integer overflow

local information disclosure

media server

android-11

android-12

android-12l

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.7%

JSON

In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure from the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-233735886

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-11 Android-12 Android-12L"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2022-09-01