Lucene search

K
nvd[email protected]NVD:CVE-2022-26428
HistoryAug 01, 2022 - 2:15 p.m.

CVE-2022-26428

2022-08-0114:15:09
CWE-362
web.nvd.nist.gov

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260.

Affected configurations

NVD
Node
googleandroidMatch11.0
OR
googleandroidMatch12.0
AND
mediatekmt6739Match-
OR
mediatekmt6761Match-
OR
mediatekmt6765Match-
OR
mediatekmt6771Match-
OR
mediatekmt8163Match-
OR
mediatekmt8167Match-
OR
mediatekmt8173Match-
OR
mediatekmt8183Match-
OR
mediatekmt8362aMatch-
OR
mediatekmt8385Match-
OR
mediatekmt8695Match-

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2022-26428