ASB-A-214999987 — Vulnetix

ASB-A-214999987 PUBLISHED CVSS 8.600000381469727 HIGH

In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Risk Scores

CVSS 4.0

8.600000381469727

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
platform	frameworks/native	12, 12L, *

Timeline

Aug 1, 2022 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2022-08-01 advisory
https://android.googlesource.com/platform/frameworks/native/+/06ea6b381117a4f49c2854bb54efb099b7295276 patch
https://android.googlesource.com/platform/frameworks/native/+/c2cf02c17af0d7e5f58b8a17ecb9cfcc91a4d2eb patch

Open in Interactive Console →