CVE-2022-47470: Medium severity Google Android vulnerability
Published May 1, 2023
·Updated
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.
Affected Software
32 affected componentsFixes available
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Google Android=10.0
Google Android=11.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Google Android
android/:unknown:>=SoCVersion:0<SoCVersion:2023-05-05
SoCVersion:2023-05-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-05-05
Event History
May 1, 2023
CVE Published
via Android·12:00 AM
Advisory Published
via OSV·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
May 9, 2023
CVE Published
via MITRE·01:20 AM
Data Sourced
via MITRE·01:20 AM
Description
Data Sourced
02:15 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-47470?
CVE-2022-47470 has a severity rating that indicates it could lead to local denial of service.
2
How do I fix CVE-2022-47470?
To fix CVE-2022-47470, you should update your affected Android operating system to the latest security patch.
3
Which versions of Android are affected by CVE-2022-47470?
CVE-2022-47470 affects Android versions 10.0 and 11.0.
4
What type of vulnerability is CVE-2022-47470?
CVE-2022-47470 is classified as an out of bounds read vulnerability.
5
Can CVE-2022-47470 be exploited remotely?
No, CVE-2022-47470 requires system execution privileges, meaning it cannot be exploited remotely.