CVE-2022-20604

In SAECOMMSetDcnIdForPlmn of SAECOMMDbManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from a single device with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20604

CVE-2022-20604 affects the Android kernel function SAECOMM_SetDcnIdForPlmn in SAECOMM_DbManagement.c. A missing bounds check causes an out-of-bounds read, enabling possible information disclosure on a single device. The CVSSv3.1 vector indicates a local, low-privilege impact with no user interact...