CVE-2022-20052

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS05836642; Issue ID: ALPS05836642.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Apr 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-200537.8In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilCVE-2022-200547.8In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilegeCVE-2022-200556.8In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200566.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200576.5In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with SystemCVE-2022-200586.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200596.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-20067.8AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installaCVE-2022-200606.6In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation CVE-2022-200626.7In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System executioCVE-2022-200636.5In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SCVE-2022-200646.7In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with S
CVE-2022-20052: Medium severity, CVSS 6.5 | Vulnix