CVE-2022-20111

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366069; Issue ID: ALPS06366069.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-755

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-201125.5In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings dueCVE-2022-201137.8In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic erroCVE-2022-201147.8In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance duCVE-2022-201155.5In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permisCVE-2022-201167.8In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead tCVE-2022-201175.5In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to locaCVE-2022-201187.0In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalationCVE-2022-201195.5In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to localCVE-2022-201209.8Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/ACVE-2022-201215.5In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local inCVE-2022-201229.8The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue usCVE-2022-201237.5In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to
CVE-2022-20111: High severity, CVSS 8.4 | Vulnix