Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-20445

Опубликовано: 08 нояб. 2022
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-225876506

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*

EPSS

Процентиль: 47%
0.00241
Низкий

7.5 High

CVSS3

Дефекты

CWE-1284
CWE-1284

Связанные уязвимости

github логотип

GHSA-r3gx-qqx9-hjg9

CVSS3: 7.5
github
около 3 лет назад

In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-225876506

EPSS

Процентиль: 47%
0.00241
Низкий

7.5 High

CVSS3

Дефекты

CWE-1284
CWE-1284