CVE-2022-42506

In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-42506

CVE-2022-42506 affects Android kernel components. The issue is in SimUpdatePbEntry::encode (simdata.cpp) where a missing bounds check can cause an out-of-bounds write, enabling local escalation of privilege with System execution privileges needed. Exploitation is described as local and requires n...