CVE-2022-20062

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836418; Issue ID: ALPS05836418.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Apr 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-200636.5In atf (spm), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SCVE-2022-200646.7In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with SCVE-2022-200656.7In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System eCVE-2022-200664.4In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to local information discCVE-2022-200676.7In mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-200686.7In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privCVE-2022-200696.6In preloader (usb), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege, foCVE-2022-20078.8Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a craCVE-2022-200706.7In ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SystemCVE-2022-200716.7In ccu, there is a possible escalation of privilege due to a missing certificate validation. This could lead to local escalation of privilegCVE-2022-200726.7In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to locCVE-2022-200736.6In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, fo
CVE-2022-20062: Medium severity, CVSS 6.7 | Vulnix