VDB

CVE-2022-42533

CVE-2022-42533 PUBLISHED CVSS 7.800000190734863 HIGH

In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239415718References: N/A

EPSS 0.13% · 3.2th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.13%
3.2th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid kernel
googleandroid

Timeline

  • Nov 17, 2022 CVE Published
  • Nov 18, 2022 EPSS Score
  • Nov 22, 2022 EPSS Score
  • Dec 31, 2022 EPSS Score
  • Feb 12, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 26, 2023 EPSS Score
  • May 8, 2023 EPSS Score
  • Jun 20, 2023 EPSS Score
  • Sep 14, 2023 EPSS Score
  • Oct 27, 2023 EPSS Score
  • Dec 8, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›