CVE-2022-20233

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222472803References: N/A

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-202347.5In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, it gets both 'mCompo CVE-2022-202355.5The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver i CVE-2022-202367.5A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709 CVE-2022-202379.8In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remo CVE-2022-202389.8'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can als CVE-2022-202399.8remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also CVE-2022-20249.8OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11.CVE-2022-202402.3In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check CVE-2022-202413.3In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local CVE-2022-202425.5In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information d CVE-2022-202434.4In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing dat CVE-2022-202447.5In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if mor