VDB
CVE-2022-32594
CVE-2022-32594
PUBLISHED
Es existieren mehrere Schwachstellen in Google Android. Die Fehler bestehen in den Komponenten Framework, Media Framework, System, Google Play System Updates, Kernel, Imagination Technologies, MediaTek, Unisoc, Qualcomm, Qualcomm closed-source und Pixel. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuführen und vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 0.02% · 3.2th percentile
Risk Scores
EPSS Score
0.02%
3.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Google Android 12L | ||
| Google Android 10 | ||
| Google Android 12 | ||
| Google Android 13 | ||
| Google Android 11 | ||
| SUSE | SUSE Linux |
Exploit Intelligence
- CIRCL seen: CVE-2022-32594 (circl-sighting)
- https://corp.mediatek.com/product-security-bulletin/December-2022 (circl)
Timeline
- Dec 5, 2022 CVE Published
- Dec 5, 2022 PoC Published
- Dec 6, 2022 EPSS Score
- Dec 7, 2022 EPSS Score
- Jan 17, 2023 EPSS Score
- Feb 28, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 11, 2023 EPSS Score
- May 23, 2023 EPSS Score
- Jul 5, 2023 EPSS Score
- Sep 27, 2023 EPSS Score
- Nov 8, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2234.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2234 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-April/014437.html advisory
- https://source.android.com/docs/security/bulletin/2022-12-01 advisory
- https://source.android.com/docs/security/bulletin/pixel/2022-12-01 advisory