Veille CVE
CVE-2022-22265
7.8 Élevée Exploitée activementCatalogue CISA KEV — Samsung Mobile Devices Use-After-Free Vulnerability
Ajoutée le 18/09/2023 · Échéance de correction (agences US) : 09/10/2023
Action requise : Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 5.0 Moyenne | mobile.security@samsung.com | CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L |
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 4.6 Moyenne | nvd@nist.gov (NVD) | AV:L/AC:L/Au:N/C:P/I:P/A:P |