CVE-2022-42533

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239415718References: N/A

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Nov 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-425347.8In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead CVE-2022-425355.5In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local informatio CVE-2022-425369.8Remote code execution CVE-2022-425379.8Remote code execution CVE-2022-425389.8Elevation of privilege CVE-2022-425397.5Information disclosure CVE-2022-42548.8sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters CVE-2022-425409.8Elevation of privilege CVE-2022-425419.8Remote code execution CVE-2022-425426.7In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to CVE-2022-425434.4In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local in CVE-2022-425447.8In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input vali