CVE-2022-20582

In ppmpunprotectmfcfwbuf of drmfw.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20582

CVE-2022-20582 affects the Android kernel component, specifically the drm_fw.c function ppmp_unprotect_mfcfw_buf, where an out-of-bounds write can occur due to improper input validation. The vulnerability enables local privilege escalation with no extra user interaction, as indicated by multiple ...