CVE-2022-26099: Null Pointer Dereference
Published Apr 11, 2022
·Updated
Null pointer dereference vulnerability in parserinfe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attackers.
Affected Software
3 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
Event History
Apr 11, 2022
CVE Published
via MITRE·07:37 PM
Data Sourced
via MITRE·07:37 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-26099?
CVE-2022-26099 is rated as a high-severity vulnerability due to the potential for remote attackers to exploit it for out of bounds read.
2
How do I fix CVE-2022-26099?
To fix CVE-2022-26099, update the libsimba library to the version provided in the SMR Apr-2022 Release 1.
3
Which versions of Android are affected by CVE-2022-26099?
CVE-2022-26099 affects Android versions 10.0, 11.0, and 12.0.
4
What type of vulnerability is CVE-2022-26099?
CVE-2022-26099 is a null pointer dereference vulnerability allowing out of bounds read.
5
Can CVE-2022-26099 be exploited remotely?
Yes, CVE-2022-26099 can be exploited remotely by attackers.