Vulnetix
Try Vulnetix Request Demo
CVE-2022-20118 PUBLISHED CVSS 6.900000095367432 MEDIUM

In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-205707793References: N/A

EPSS 0.01% · 1.4th percentile

Risk Scores

CVSS v2.0
6.900000095367432
EPSS Score
0.01%
1.4th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid kernel
googleandroid

Timeline

References

Open in Interactive Console →