CVE-2022-44431: Integer Overflow
A wlan driver function lacks parameter checks, resulting EOP issue.
Other sources
A wlan driver function lacks parameter checks, resulting heap overflow vulnerability.
— OSV
A wlan driver function lacks parameter checks, resulting integer overflow vulnerability.
— OSV
A wlan driver function lacks parameter checks, resulting Out-of-bounds Write issues.
— OSV
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2022-12-05 - Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-44431?
CVE-2022-44431 has a severity rating that indicates it can lead to a local denial of service in wlan services.
How do I fix CVE-2022-44431?
To remediate CVE-2022-44431, update the affected Android version to the latest security patch provided by Google.
Which versions of Android are affected by CVE-2022-44431?
CVE-2022-44431 affects Android versions 10.0, 11.0, and 12.0.
What impact does CVE-2022-44431 have on devices?
CVE-2022-44431 can potentially cause a local denial of service affecting wlan services on the device.
Is any third-party hardware affected by CVE-2022-44431?
No, the reported vulnerabilities in CVE-2022-44431 specifically pertain to Google’s Android operating system and do not affect third-party hardware.