Lucene search

[email protected]NVD:CVE-2022-20048

HistoryMar 10, 2022 - 5:45 p.m.

CVE-2022-20048

2022-03-1017:45:02

CWE-787

[email protected]

web.nvd.nist.gov

video decoder

out of bounds write

local escalation of privilege

missing bounds check

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; Issue ID: ALPS05917502.

Affected configurations

Nvd

Node

googleandroidMatch10.0

googleandroidMatch11.0

googleandroidMatch12.0

AND

mediatekmt5816Match-

mediatekmt5835Match-

mediatekmt6885Match-

mediatekmt6893Match-

mediatekmt9900Match-

mediatekmt9901Match-

mediatekmt9950Match-

mediatekmt9969Match-

mediatekmt9970Match-

mediatekmt9980Match-

VendorProductVersionCPE
googleandroid10.0cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
googleandroid11.0cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
googleandroid12.0cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
mediatekmt5816-cpe:2.3:h:mediatek:mt5816:-:*:*:*:*:*:*:*
mediatekmt5835-cpe:2.3:h:mediatek:mt5835:-:*:*:*:*:*:*:*
mediatekmt6885-cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
mediatekmt6893-cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
mediatekmt9900-cpe:2.3:h:mediatek:mt9900:-:*:*:*:*:*:*:*
mediatekmt9901-cpe:2.3:h:mediatek:mt9901:-:*:*:*:*:*:*:*
mediatekmt9950-cpe:2.3:h:mediatek:mt9950:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	10.0	cpe:2.3:o:google:android:10.0:::::::*
google	android	11.0	cpe:2.3:o:google:android:11.0:::::::*
google	android	12.0	cpe:2.3:o:google:android:12.0:::::::*
mediatek	mt5816	-	cpe:2.3:h:mediatek:mt5816:-:::::::*
mediatek	mt5835	-	cpe:2.3:h:mediatek:mt5835:-:::::::*
mediatek	mt6885	-	cpe:2.3:h:mediatek:mt6885:-:::::::*
mediatek	mt6893	-	cpe:2.3:h:mediatek:mt6893:-:::::::*
mediatek	mt9900	-	cpe:2.3:h:mediatek:mt9900:-:::::::*
mediatek	mt9901	-	cpe:2.3:h:mediatek:mt9901:-:::::::*
mediatek	mt9950	-	cpe:2.3:h:mediatek:mt9950:-:::::::*

Rows per page:

1-10 of 131

References

corp.mediatek.com/product-security-bulletin/March-2022

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2022-20048

prion1 cvelist1 cve1