PT-2022-14407 · Google · Android Kernel

Published 2022-06-15 · Updated 2022-06-24 · CVE-2022-20178

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to an integer overflow in the ioctl dpm qos update and ioctl event control set functions, which could lead to a local escalation of privilege. System execution privileges are needed for exploitation, and user interaction is not required.

Recommendations For Android kernel, apply the necessary patches or updates to fix the integer overflow issue in the ioctl dpm qos update and ioctl event control set functions.

Fix

Memory Corruption

Integer Overflow

Weakness Enumeration

CWE-787

CWE-190

Related Identifiers

CVE-2022-20178

Affected Products

Android Kernel

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2022-20178 · Security Note
• https://source.android.com/security/bulletin/pixel/2022-06-01 · Vendor Advisory