CVE-2022-42516

In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-42516

CVE-2022-42516 affects Android kernel in ProtocolSimBuilderLegacy::BuildSimGetGbaAuth. The flaw is an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with System privileges (no user interaction required). Exploitation and impact are described in multiple...