CVE-2022-20221

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-205571133

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jul 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-202229.8In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execCVE-2022-202237.8In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due toCVE-2022-202247.5In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote iCVE-2022-202255.5In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission chCVE-2022-202263.9In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to locCVE-2022-202275.5In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with UsCVE-2022-202286.5In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could lead to remote infoCVE-2022-202299.8In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This cCVE-2022-20239.8Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4.CVE-2022-202305.5In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input validation. This couldCVE-2022-202316.7In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escCVE-2022-202336.7In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect boun