CVE-2022-20048: High severity android vulnerability
In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917502; Issue ID: ALPS05917502.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20048?
CVE-2022-20048 is a vulnerability in the video decoder of Google Android that allows for a possible out of bounds write, leading to local escalation of privilege.
How severe is CVE-2022-20048?
CVE-2022-20048 has a severity level of high (7) on the Common Vulnerability Scoring System (CVSS).
Is user interaction needed for exploitation of CVE-2022-20048?
No, user interaction is not needed for exploitation of CVE-2022-20048.
Which versions of Google Android are affected by CVE-2022-20048?
Google Android versions 10.0, 11.0, and 12.0 are affected by CVE-2022-20048.
How can I patch CVE-2022-20048?
To patch CVE-2022-20048, refer to the patch ID ALPS05917502 and follow the instructions provided by Google.