Lucene search

K
nvd[email protected]NVD:CVE-2022-20080
HistoryApr 11, 2022 - 8:15 p.m.

CVE-2022-20080

2022-04-1120:15:19
CWE-362
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

In SUB2AF, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05881290; Issue ID: ALPS05881290.

Affected configurations

NVD
Node
googleandroidMatch9.0
OR
googleandroidMatch10.0
OR
googleandroidMatch11.0
OR
googleandroidMatch12.0
AND
mediatekmt6580Match-
OR
mediatekmt6735Match-
OR
mediatekmt6737Match-
OR
mediatekmt6739Match-
OR
mediatekmt6753Match-
OR
mediatekmt6757Match-
OR
mediatekmt6761Match-
OR
mediatekmt6763Match-
OR
mediatekmt6765Match-
OR
mediatekmt6768Match-
OR
mediatekmt6771Match-
OR
mediatekmt6779Match-
OR
mediatekmt6781Match-
OR
mediatekmt6785Match-
OR
mediatekmt6833Match-
OR
mediatekmt6853Match-
OR
mediatekmt6873Match-
OR
mediatekmt6877Match-
OR
mediatekmt6883Match-
OR
mediatekmt6885Match-
OR
mediatekmt6889Match-
OR
mediatekmt6893Match-
OR
mediatekmt8168Match-
OR
mediatekmt8321Match-
OR
mediatekmt8365Match-
OR
mediatekmt8666Match-
OR
mediatekmt8765Match-
OR
mediatekmt8766Match-
OR
mediatekmt8768Match-
OR
mediatekmt8786Match-
OR
mediatekmt8788Match-
OR
mediatekmt8791Match-
OR
mediatekmt8797Match-

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2022-20080