CVE-2022-20397

CVE-2022-20397 affects the Android kernel component SitRilSe.cpp (SitRilClient_OnResponse). The issue is an out-of-bounds write caused by a missing bounds check, enabling local elevation of privilege without user interaction. The CVSSv3.1 metrics indicate LOCAL exploitability, LOW privileges requ...