ASB-A-239267173

vendorUSosv

view advisory published 2022-12-01Licence: per source

In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-20473US	critical9.8	8.85% (95th)	Exploit	2022-12-13
In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execut…

references

External citations — patches, advisories, analysis.

https://android.googlesource.com/platform/frameworks/minikin/+/c77b7cd6c1f57a43bcbf8bd012b84aa9d77746e2FIX
https://source.android.com/security/bulletin/2022-12-01ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan