CVE-2022-20605

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231722405References: N/A

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Dec 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-206064.9In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This CVE-2022-206078.8In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut CVE-2022-206085.5In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di CVE-2022-206095.5In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl CVE-2022-20613.3Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0.CVE-2022-206108.8In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution w CVE-2022-206117.8In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions b CVE-2022-206124.3A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of CVE-2022-206134.3A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS CVE-2022-206144.3A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DN CVE-2022-206155.4Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resultin CVE-2022-206164.3Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing a