CVE-2022-20098

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06419017.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-200997.8In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege wiCVE-2022-20109.3Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer procesCVE-2022-201004.4In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosureCVE-2022-201015.5In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no aCVE-2022-201024.4In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosureCVE-2022-201034.4In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local information disclosure wiCVE-2022-201045.5In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local information disclosure wiCVE-2022-201056.7In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilegCVE-2022-201066.7In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilegeCVE-2022-201074.4In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial of service with SysteCVE-2022-201086.7In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of priviCVE-2022-201097.8In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalation of privilege with
CVE-2022-20098: Medium severity, CVSS 4.4 | Vulnix