{"id":"CVE-2022-20605","state":"PUBLISHED","title":"In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no a","description":"In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231722405References: N/A","publishedAt":"2022-12-16T00:00:00.000Z","updatedAt":"2025-04-18T13:36:12.389Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"google_android","products":["n/a Android"],"affected":[{"vendor":"n/a","product":"Android","versions":[{"version":"Android kernel","status":"affected"}]}],"references":["https://source.android.com/security/bulletin/pixel/2022-12-01"],"weaknesses":["CWE-125"],"ingestedAt":"2026-10-29T19:49:32.184Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/20xxx/CVE-2022-20605.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-20605","state":"PUBLISHED","datePublished":"2022-12-16T00:00:00.000Z","dateUpdated":"2025-04-18T13:36:12.389Z","assignerShortName":"google_android","assignerOrgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","dateReserved":"2021-10-14T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231722405References: N/A"}],"affected":[{"vendor":"n/a","product":"Android","versions":[{"version":"Android kernel","status":"affected"}]}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-12-01"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"Information disclosure"}]}],"providerMetadata":{"shortName":"google_android","orgId":"baff130e-b8d5-4e15-b3d3-c3cf5d5545c6","dateUpdated":"2022-12-16T00:00:00.000Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-12-01","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T02:17:52.909Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-04-18T13:35:43.177574Z","id":"CVE-2022-20605","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","type":"CWE","lang":"en","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-18T13:36:12.389Z"}}]}}}