VDB

CVE-2022-20119

CVE-2022-20119 PUBLISHED CVSS 2.0999999046325684 LOW

In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213170715References: N/A

EPSS 0.02% · 4.1th percentile

Risk Scores

CVSS 2.0
2.0999999046325684
EPSS Score
0.02%
4.1th percentile

Affected Products

VendorProductVersions
n/aAndroid*
googleandroid

Timeline

  • May 10, 2022 CVE Published
  • May 11, 2022 EPSS Score
  • May 19, 2022 EPSS Score
  • Jun 29, 2022 EPSS Score
  • Aug 19, 2022 EPSS Score
  • Oct 7, 2022 EPSS Score
  • Nov 25, 2022 EPSS Score
  • Jan 13, 2023 EPSS Score
  • Mar 4, 2023 EPSS Score
  • Apr 22, 2023 EPSS Score
  • Jun 10, 2023 EPSS Score
  • Jul 29, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›