CVE-2022-20092

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061...

CVE-2022-20092

The CVE-2022-20092 issue affects MediaTek devices with the alac decoder. Root cause: missing bounds checks cause an out-of-bounds read, enabling local information disclosure without execution privileges. Exploitation is reported as requiring local access; user interaction is not needed. Patch/mit...