CVE-2022-20228: Use After Free

Published Jul 6, 2022

Updated

In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213850092

Affected Software

3 affected components

Google Android=12.0

Google Android=12.1

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2022-07-01

Event History

Jul 6, 2022

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Jul 13, 2022

CVE Published

via MITRE·06:23 PM

Data Sourced

via MITRE·06:23 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-20228?

CVE-2022-20228 has a moderate severity level due to memory corruption that may lead to remote information disclosure.

How do I fix CVE-2022-20228?

To fix CVE-2022-20228, update your Android device to the latest available security patch that addresses this vulnerability.

What versions of Android are affected by CVE-2022-20228?

CVE-2022-20228 affects Android versions 12.0 and 12.1.

What type of exploitation does CVE-2022-20228 require?

CVE-2022-20228 requires user interaction for exploitation.

What is the impact of CVE-2022-20228?

The impact of CVE-2022-20228 is potential remote information disclosure without requiring additional execution privileges.