CVE-2022-44428: Medium severity Google Android vulnerability
A wlan driver function lacks parameter checks, resulting heap overflow vulnerability.
Other sources
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-44428?
The severity of CVE-2022-44428 is considered high due to the potential denial of service in wlan services.
How do I fix CVE-2022-44428?
To fix CVE-2022-44428, ensure that you update your Android device to the latest security patch provided by Google.
Which versions of Android are affected by CVE-2022-44428?
CVE-2022-44428 affects Android versions 10.0, 11.0, and 12.0.
Can CVE-2022-44428 be exploited remotely?
CVE-2022-44428 requires local access to the device, therefore it cannot be exploited remotely.
What are the potential consequences of CVE-2022-44428?
The potential consequence of CVE-2022-44428 is a local denial of service affecting wlan services, disrupting connectivity.