CVE-2022-32622: Medium severity android vulnerability
Published Dec 5, 2022
·Updated
In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363786; Issue ID: ALPS07363786.
Affected Software
18 affected components
Google Android=11.0
Google Android=12.0
Google Android=13.0
MediaTek Mt6789
MediaTek Mt6855
MediaTek Mt6879
MediaTek Mt6895
MediaTek Mt6983
MediaTek Mt8781
All of the following
Any of the following
Google Android=11.0
Google Android=12.0
Google Android=13.0
Any of the following
MediaTek Mt6789
MediaTek Mt6855
MediaTek Mt6879
MediaTek Mt6895
MediaTek Mt6983
MediaTek Mt8781
Event History
Dec 5, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-32622?
CVE-2022-32622 is considered to have a high severity due to its potential for local escalation of privilege.
2
How do I fix CVE-2022-32622?
To fix CVE-2022-32622, apply the patch provided in Patch ID ALPS07363786.
3
Which versions of Android are affected by CVE-2022-32622?
CVE-2022-32622 affects Android versions 11.0, 12.0, and 13.0.
4
Is user interaction required for exploiting CVE-2022-32622?
No, user interaction is not needed for exploitation of CVE-2022-32622.
5
What type of vulnerability is CVE-2022-32622?
CVE-2022-32622 is a memory corruption vulnerability due to a missing bounds check.