CVE-2022-20598

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In sec_media_protect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242357514References: N/A

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Dec 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-205996.7In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of prCVE-2022-20605.4Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.CVE-2022-206007.8In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with SysteCVE-2022-206017.5Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/ACVE-2022-206027.5Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/ACVE-2022-206037.2In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. This could leadCVE-2022-206045.5In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead CVE-2022-206057.5In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead toCVE-2022-206064.9In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This CVE-2022-206078.8In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executCVE-2022-206085.5In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information diCVE-2022-206095.5In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl
CVE-2022-20598: High severity, CVSS 7.8 | Vulnix