CVE-2022-42756: Buffer Overflow
In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of service in kernel.
Other sources
The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2022-12-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-42756?
CVE-2022-42756 has a severity level that suggests it could lead to local denial of service within the kernel.
How do I fix CVE-2022-42756?
To mitigate CVE-2022-42756, update your Google Android devices to the latest security patches provided in the security updates.
Which Android versions are affected by CVE-2022-42756?
CVE-2022-42756 affects Android versions 10.0, 11.0, and 12.0.
Is CVE-2022-42756 specific to certain hardware?
No, CVE-2022-42756 pertains primarily to Android software and does not affect specific hardware from Unisoc.
Can CVE-2022-42756 be exploited remotely?
CVE-2022-42756 is not classified as a remote vulnerability; it requires local access to exploit.