CVE-2022-20235

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to DDK 1.18 however, a user-space program could write arbitrary data to the page, leading to memory corruption issues.Product: AndroidVersions: Android SoCAndroid ID: A-259967780

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-202367.5A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709CVE-2022-202379.8In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remoCVE-2022-202389.8'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can alsCVE-2022-202399.8remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can alsoCVE-2022-20249.8OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11.CVE-2022-202402.3In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission checkCVE-2022-202413.3In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local CVE-2022-202425.5In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dCVE-2022-202434.4In Core Utilities, there is a possible log information disclosure. This could lead to local information disclosure of sensitive browsing datCVE-2022-202447.5In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if morCVE-2022-202452.4In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. This could lead to lCVE-2022-202467.8In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permiss
CVE-2022-20235: Medium severity, CVSS 5.5 | Vulnix