CVE-2022-20156

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-212803946References: N/A

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-201586.7In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local esca CVE-2022-201594.4In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could CVE-2022-20165.4Cross-site Scripting (XSS) - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1.CVE-2022-201609.8Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A CVE-2022-201624.4In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local informa CVE-2022-201649.8Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A CVE-2022-201654.4In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information discl CVE-2022-201666.7In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local e CVE-2022-201679.8Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A CVE-2022-201687.5Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A CVE-2022-201697.5Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A CVE-2022-20177.2A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affects some unknown pro