VDB
CVE-2022-20106
CVE-2022-20106
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330460; Issue ID: DTV03330460.
EPSS 0.13% · 3.1th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.13%
3.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| linux | linux_kernel | 4.9, 4.19 |
| android | 9.0, 10.0, 11.0 | |
| MediaTek, Inc. | MT9011, MT9215, MT9216, MT9220, MT9221, MT9255, MT9256, MT9266, MT9269, MT9285, MT9286, MT9288, MT9600, MT9602, MT9610, MT9611, MT9612, MT9613, MT9615, MT9617, MT9629, MT9630, MT9631, MT9632, MT9636, MT9638, MT9639, MT9650, MT9652, MT9666, MT9669, MT9670, MT9675, MT9685, MT9686, MT9688 | Android 9.0, 10.0, 11.0 or Linux Kernel 4.9, 4.19 |
Timeline
- May 3, 2022 CVE Published
- May 4, 2022 EPSS Score
- May 12, 2022 EPSS Score
- Jun 23, 2022 EPSS Score
- Aug 12, 2022 EPSS Score
- Oct 1, 2022 EPSS Score
- Nov 19, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
- Feb 27, 2023 EPSS Score
- Apr 17, 2023 EPSS Score
- Jun 6, 2023 EPSS Score
- Jul 26, 2023 EPSS Score