Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-20132

Опубликовано: 15 июн. 2022
Источник: nvd
CVSS3: 4.6
CVSS2: 4.9
EPSS Низкий

Описание

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 20%
0.00063
Низкий

4.6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 4.6
ubuntu
больше 3 лет назад

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

CVSS3: 4.6
redhat
больше 3 лет назад

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

CVSS3: 4.6
debian
больше 3 лет назад

In lg_probe and related functions of hid-lg.c and other USB HID files, ...

CVSS3: 4.6
github
больше 3 лет назад

In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel

CVSS3: 4.6
fstec
больше 3 лет назад

Уязвимость компонента hid-lg.c ядра операционной системы Android, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 20%
0.00063
Низкий

4.6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-125