PT-2022-14780 · Google · Android Kernel

Published 2022-12-16 · Updated 2023-08-08 · CVE-2022-20574

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android kernel

Description The issue is related to a possible out of bounds read in the sec sysmmu info function of drm fw.c due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not required for exploitation.

Recommendations For Android kernel, apply the necessary patch or update to fix the improper input validation issue in the sec sysmmu info function of drm fw.c.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-20574

Affected Products

Android Kernel

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2022-20574 · Security Note
• https://source.android.com/security/bulletin/pixel/2022-12-01 · Vendor Advisory