CVE-2022-21768: High severity Google Android vulnerability

Published Jul 6, 2022

Updated

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784351; Issue ID: ALPS06784351.

Affected Software

12 affected components

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android=12.0

MediaTek Mt8167s

MediaTek Mt8175

MediaTek Mt8183

MediaTek Mt8362a

MediaTek Mt8365

MediaTek Mt8385

Google Android

Event History

Jul 6, 2022

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-21768?

CVE-2022-21768 is a vulnerability in Bluetooth that allows for a possible out of bounds write, leading to local escalation of privilege without additional execution privileges needed.

What is the severity of CVE-2022-21768?

The severity of CVE-2022-21768 is rated as high with a severity value of 8.8.

Which software is affected by CVE-2022-21768?

Google Android versions 8.1, 9.0, 10.0, 11.0, and 12.0 are affected by CVE-2022-21768.

Is user interaction needed for exploitation of CVE-2022-21768?

No, user interaction is not needed for the exploitation of CVE-2022-21768.

How can I fix CVE-2022-21768?

To fix CVE-2022-21768, apply the patch with ID ALPS06784351 or refer to the provided source for security bulletins from Google and MediaTek.