CVE-2022-20025: High severity Google Android vulnerability

Published Feb 7, 2022

Updated

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126832; Issue ID: ALPS06126832.

Affected Software

12 affected components

Google Android

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android=12.0

MediaTek Mt8167

MediaTek Mt8175

MediaTek Mt8183

MediaTek Mt8362a

MediaTek Mt8365

MediaTek Mt8385

Event History

Feb 7, 2022

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Feb 9, 2022

CVE Published

via MITRE·10:05 PM

Data Sourced

via MITRE·10:05 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-20025?

CVE-2022-20025 has a severity rating that indicates a possible local escalation of privilege due to an out of bounds write.

How do I fix CVE-2022-20025?

To fix CVE-2022-20025, apply the available security patches provided by Google for affected versions of Android.

Which products are affected by CVE-2022-20025?

CVE-2022-20025 affects various versions of Google Android, including 8.1, 9.0, 10.0, 11.0, and 12.0.

Is user interaction required to exploit CVE-2022-20025?

No, user interaction is not needed for the exploitation of CVE-2022-20025.

What specific vulnerability is described in CVE-2022-20025?

CVE-2022-20025 describes a vulnerability due to a missing bounds check in Bluetooth, leading to potential escalation of privileges.