Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2022-0343

Local Priviledge escalation in Perfetto Dev scripts

Description

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google LLC Perfetto Dev Scripts

  • unspecified to ≤ 24.2affected

References