First published: Mon Apr 11 2022(Updated: )
Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | =10.0 | |
Google Android | =11.0 | |
Google Android | =12.0 | |
Samsung Exynos 2100 | ||
Samsung Exynos 980 | ||
Samsung Exynos 9830 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-27834 is a use after free vulnerability in the dsp_context_unload_graph function of the DSP driver prior to SMR Apr-2022 Release 1.
Google Android versions 10.0, 11.0, and 12.0 are affected by CVE-2022-27834.
CVE-2022-27834 has a severity level of high (7 out of 10).
Attackers can exploit CVE-2022-27834 to perform malicious actions.
No, Samsung Exynos 2100 is not vulnerable to CVE-2022-27834.