CVE-2022-26428: Race Condition
Published Aug 1, 2022
·Updated
In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06521260; Issue ID: ALPS06521260.
Affected Software
13 affected components
Google Android=11.0
Google Android=12.0
MediaTek Mt6739
MediaTek Mt6761
MediaTek Mt6765
MediaTek Mt6771
MediaTek Mt8163
MediaTek Mt8167
MediaTek Mt8173
MediaTek Mt8183
MediaTek Mt8362a
MediaTek Mt8385
MediaTek Mt8695
Event History
Aug 1, 2022
CVE Published
via MITRE·01:56 PM
Data Sourced
via MITRE·01:56 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2022-26428?
CVE-2022-26428 is a vulnerability in the video codec that can lead to local escalation of privilege with system execution privileges.
2
Is user interaction required for exploitation of CVE-2022-26428?
No, user interaction is not needed for exploitation of CVE-2022-26428.
3
Which software versions are affected by CVE-2022-26428?
Google Android 11.0 and Google Android 12.0 are affected by CVE-2022-26428.
4
How severe is CVE-2022-26428?
CVE-2022-26428 has a severity score of 6.4 (medium).
5
How can I fix CVE-2022-26428?
To fix CVE-2022-26428, apply the patch with the ID ALPS06521260 provided by the vendor.