← Database

CVE-2022-20092

MEDIUM CVSS: 5.5 Published: 2022-05-03 Modified: 2026-06-17

Description

In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061.

Affected Platforms

Mediatek Mt8185Mediatek Mt6779Mediatek Mt6893Mediatek Mt6873Mediatek Mt6983Mediatek Mt8791Mediatek Mt8797Google AndroidMediatek Mt6889Mediatek Mt6879

Weakness Type

CWE-125

References