CVE-2022-32624

MEDIUM

Google Android - Out-of-Bounds Access

Title source: rule

Description

In throttling, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405923; Issue ID: ALPS07405923.

References (1)

[Vendor Advisory] https://corp.mediatek.com/product-security-bulletin/December-2022

Scores

CVSS v3 6.7

EPSS 0.0002

EPSS Percentile 3.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-131

Status published

Affected Products (2)

google/android

Timeline

Published Dec 05, 2022

Tracked Since Feb 18, 2026