CVE-2022-20010

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213519176

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
May 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-200115.5In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This coCVE-2022-200127.8In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no adCVE-2022-200136.4In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System eCVE-2022-200146.7In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege withCVE-2022-200154.4In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosurCVE-2022-200166.7In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System eCVE-2022-200175.5In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure CVE-2022-200184.4In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure withCVE-2022-200195.5In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information discloCVE-2022-20027.8GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionConCVE-2022-200205.5In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure wCVE-2022-200216.5In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_
CVE-2022-20010: Medium severity, CVSS 6.5 | Vulnix