CVE-2022-20008

In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data

published May 10, 2022

CVSS
—
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.4th percentile
Published
2022-05-10T19:56Z
EPSS history
Timeline
  • 10 MAY 19:56Z
    In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data
    cvelistv5