Lucene search

K
nvd[email protected]NVD:CVE-2022-20107
HistoryMay 03, 2022 - 9:15 p.m.

CVE-2022-20107

2022-05-0321:15:09
CWE-190
web.nvd.nist.gov

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.7%

In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330673; Issue ID: DTV03330673.

Affected configurations

NVD
Node
googleandroidMatch9.0
OR
googleandroidMatch10.0
OR
googleandroidMatch11.0
AND
mediatekmt9011Match-
OR
mediatekmt9215Match-
OR
mediatekmt9216Match-
OR
mediatekmt9220Match-
OR
mediatekmt9221Match-
OR
mediatekmt9255Match-
OR
mediatekmt9256Match-
OR
mediatekmt9266Match-
OR
mediatekmt9269Match-
OR
mediatekmt9285Match-
OR
mediatekmt9286Match-
OR
mediatekmt9288Match-
OR
mediatekmt9600Match-
OR
mediatekmt9602Match-
OR
mediatekmt9610Match-
OR
mediatekmt9611Match-
OR
mediatekmt9612Match-
OR
mediatekmt9613Match-
OR
mediatekmt9615Match-
OR
mediatekmt9617Match-
OR
mediatekmt9629Match-
OR
mediatekmt9630Match-
OR
mediatekmt9631Match-
OR
mediatekmt9632Match-
OR
mediatekmt9636Match-
OR
mediatekmt9638Match-
OR
mediatekmt9639Match-
OR
mediatekmt9650Match-
OR
mediatekmt9652Match-
OR
mediatekmt9666Match-
OR
mediatekmt9669Match-
OR
mediatekmt9670Match-
OR
mediatekmt9675Match-
OR
mediatekmt9685Match-
OR
mediatekmt9686Match-
OR
mediatekmt9688Match-
Node
linuxlinux_kernelMatch4.9
OR
linuxlinux_kernelMatch4.19
AND
mediatekmt9011Match-
OR
mediatekmt9215Match-
OR
mediatekmt9216Match-
OR
mediatekmt9220Match-
OR
mediatekmt9221Match-
OR
mediatekmt9255Match-
OR
mediatekmt9256Match-
OR
mediatekmt9266Match-
OR
mediatekmt9269Match-
OR
mediatekmt9285Match-
OR
mediatekmt9286Match-
OR
mediatekmt9288Match-
OR
mediatekmt9600Match-
OR
mediatekmt9602Match-
OR
mediatekmt9610Match-
OR
mediatekmt9611Match-
OR
mediatekmt9612Match-
OR
mediatekmt9613Match-
OR
mediatekmt9615Match-
OR
mediatekmt9617Match-
OR
mediatekmt9629Match-
OR
mediatekmt9630Match-
OR
mediatekmt9631Match-
OR
mediatekmt9632Match-
OR
mediatekmt9636Match-
OR
mediatekmt9638Match-
OR
mediatekmt9639Match-
OR
mediatekmt9650Match-
OR
mediatekmt9652Match-
OR
mediatekmt9666Match-
OR
mediatekmt9669Match-
OR
mediatekmt9670Match-
OR
mediatekmt9675Match-
OR
mediatekmt9685Match-
OR
mediatekmt9686Match-
OR
mediatekmt9688Match-

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.7%

Related for NVD:CVE-2022-20107