PT-2022-15988 · Unknown · Audio Hal Service

Published 2022-02-11 · Updated 2022-02-18 · CVE-2022-23429

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Audio HAL Service versions prior to SMR Feb-2022 Release 1

Description The issue is caused by an improper boundary check in the audio hal service, allowing attackers to read invalid memory, which can lead to an application crash.

Recommendations For versions prior to SMR Feb-2022 Release 1, update to SMR Feb-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the audio hal service to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-23429

Affected Products

Audio Hal Service

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-23429 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23429 · Vendor Advisory
• https://t.me/cvenotify/27014 · Telegram Post