CVE-2022-0247CWE-732

Write access to VMO data through copy-on-write in Fuchsia

High · published February 25, 2022

CVSS v3.1
7.5
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00082 · 0.2th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2022-02-25T11:10Z
EPSS history
Timeline
  • 25 FEB 11:10Z
    Write access to VMO data through copy-on-write in Fuchsia
    cvelistv5