CVE-2022-42533

In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239415718References: N/A

• CWE-190
• CWE-190

• https://source.android.com/security/bulletin/pixel/2022-11-01Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2022-11-01Vendor Advisory

Published

Nov 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-42528In ffa_mrd_prot of shared_mem.c, there is a possible ID due …5.5
• CVE-2022-42529Product: AndroidVersions: Android kernelAndroid ID: A-235292…9.8
• CVE-2022-4253A vulnerability was found in SourceCodester Canteen Manageme…5.4
• CVE-2022-42530In Pixel firmware, there is a possible out of bounds read du…4.4
• CVE-2022-42531In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mit…7.8
• CVE-2022-42532In Pixel firmware, there is a possible out of bounds read du…4.4
• CVE-2022-42534In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a…7.8
• CVE-2022-42535In a query in MmsSmsProvider.java, there is a possible acces…5.5
• CVE-2022-42536Remote code execution9.8
• CVE-2022-42537Remote code execution9.8
• CVE-2022-42538Elevation of privilege9.8
• CVE-2022-42539Information disclosure7.5