VDB
CVE-2022-26473
CVE-2022-26473
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197.
EPSS 0.11% · 1.4th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.11%
1.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| MediaTek, Inc. | MT6789, MT6855, MT6879, MT6895, MT6983, MT8168, MT8365, MT8695, MT8696, MT8798 | Android 12.0 |
| android | 12.0 |
Timeline
- Oct 7, 2022 CVE Published
- Oct 8, 2022 EPSS Score
- Oct 12, 2022 EPSS Score
- Nov 21, 2022 EPSS Score
- Jan 4, 2023 EPSS Score
- Feb 18, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 17, 2023 EPSS Score
- Aug 13, 2023 EPSS Score
- Sep 26, 2023 EPSS Score
- Nov 10, 2023 EPSS Score