CVE-2022-20038

MEDIUM

Android - Out-of-bounds Write in CCU Driver

Title source: llm
STIX 2.1

Description

In ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06183335; Issue ID: ALPS06183335.

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0012
EPSS Percentile 2.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
google/android 11.0
Published Feb 09, 2022
Tracked Since Feb 18, 2026