CVE-2022-20532
Last modified
CVE-2022-20532 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-232242894
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 13.0 |
References
- https://source.android.com/security/bulletin/pixel/2023-03-01Patch, Vendor Advisory
- https://source.android.com/security/bulletin/pixel/2023-03-01Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-20532?
How severe is CVE-2022-20532?
How do I fix CVE-2022-20532?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-20527In HalCoreCallback of halcore.cc, there is a possible out of…5.5
- CVE-2022-20528In findParam of HevcUtils.cpp there is a possible out of bou…3.3
- CVE-2022-20529In multiple locations of WifiDialogActivity.java, there is a…2.4
- CVE-2022-2053When a POST request comes through AJP and the request exceed…7.5
- CVE-2022-20530In strings.xml, there is a possible permission bypass due to…5.3
- CVE-2022-20531In Telecom, there is a possible way to determine whether an …5.5
- CVE-2022-20533In getSlice of WifiSlice.java, there is a possible way to co…3.3
- CVE-2022-20535In registerLocalOnlyHotspotSoftApCallback of WifiManager.jav…3.3
- CVE-2022-20536In registerBroadcastReceiver of RcsService.java, there is a …3.3
- CVE-2022-20537In createDialog of WifiScanModeActivity.java, there is a pos…3.3
- CVE-2022-20538In getSmsRoleHolder of RoleService.java, there is a possible…5.5
- CVE-2022-20539In parameterToHal of Effect.cpp, there is a possible out of …6.7
Are you affected by CVE-2022-20532?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST