CVE-2022-20055

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160830.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Mar 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-200566.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200576.5In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System CVE-2022-200586.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200596.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-20067.8AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installa CVE-2022-200606.6In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation CVE-2022-200626.7In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System executio CVE-2022-200636.5In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with S CVE-2022-200646.7In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with S CVE-2022-200656.7In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System e CVE-2022-200664.4In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to local information disc CVE-2022-200676.7In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System