CVE-2022-32637: Medium severity android vulnerability
Published Jan 3, 2023
·Updated
In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374.
Affected Software
14 affected components
Google Android=10.0
Google Android=11.0
MediaTek Mt6781
MediaTek Mt6785
MediaTek Mt6833
MediaTek Mt6853
MediaTek Mt6853t
MediaTek Mt6873
MediaTek Mt6883
MediaTek Mt6885
MediaTek Mt6889
MediaTek Mt8185
MediaTek Mt8789
Google Android
Event History
Jan 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-32637?
CVE-2022-32637 has a high severity due to its potential to allow local escalation of privilege.
2
How do I fix CVE-2022-32637?
To fix CVE-2022-32637, apply the security patch ALPS07491374 provided by Google.
3
What causes CVE-2022-32637?
CVE-2022-32637 is caused by a missing bounds check in the HEVC decoder.
4
Is user interaction required to exploit CVE-2022-32637?
No, user interaction is not needed for the exploitation of CVE-2022-32637.
5
Which versions of Android are affected by CVE-2022-32637?
CVE-2022-32637 affects Android versions 10.0 and 11.0.