PT-2023-13304 · Google · Automotive Android Os

Published 2023-01-06 · Updated 2023-08-08 · CVE-2022-33300

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Automotive Android OS (affected versions not specified)

Description The issue is related to memory corruption in Automotive Android OS caused by improper input validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

CVE-2022-33300

Affected Products

Automotive Android Os

References · 2

• https://qualcomm.com/company/product-security/bulletins/january-2023-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33300 · Security Note