VDB
CVE-2022-20244
CVE-2022-20244
PUBLISHED
CVSS 7.5 HIGH
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if more than 100 bluetooth devices have been connected with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-201083240
EPSS 0.16% · 5.3th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.16%
5.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Android | * |
| android | 13.0.0 |
Timeline
- Aug 11, 2022 CVE Published
- Aug 12, 2022 EPSS Score
- Aug 16, 2022 EPSS Score
- Sep 27, 2022 EPSS Score
- Nov 13, 2022 EPSS Score
- Dec 29, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 31, 2023 EPSS Score
- Jul 2, 2023 EPSS Score
- Aug 17, 2023 EPSS Score
- Oct 2, 2023 EPSS Score