CVE-2022-22271: Input Validation
Published Jan 7, 2022
·Updated
A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory.
Affected Software
3 affected components
Google Android=9.0
Google Android=10.0
Google Android=11.0
Event History
Jan 7, 2022
CVE Published
via MITRE·10:39 PM
Data Sourced
via MITRE·10:39 PM
DescriptionSeverityWeakness
Jan 10, 2022
Data Sourced
via NVD·02:12 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-22271?
CVE-2022-22271 is a vulnerability that allows attackers to copy data from arbitrary memory due to a missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1.
2
What software versions are affected by CVE-2022-22271?
CVE-2022-22271 affects Google Android versions 9.0, 10.0, and 11.0.
3
What is the severity of CVE-2022-22271?
CVE-2022-22271 has a severity level of 5.5, which is considered medium.
4
How can attackers exploit CVE-2022-22271?
Attackers can exploit CVE-2022-22271 by taking advantage of the missing input validation before memory copy in TIMA trustlet to copy data from arbitrary memory.
5
Is there a fix available for CVE-2022-22271?
The fix for CVE-2022-22271 is included in the SMR Jan-2022 Release 1 for TIMA trustlet.