CVE-2022-20111

HIGH

ion - Use After Free

Title source: llm

Description

In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366069; Issue ID: ALPS06366069.

References (1)

[Vendor Advisory] https://corp.mediatek.com/product-security-bulletin/May-2022

Scores

CVSS v3 8.4

EPSS 0.0002

EPSS Percentile 5.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-755

Status published

Affected Products (4)

google/android

Timeline

Published May 03, 2022

Tracked Since Feb 18, 2026