CVE-2022-20417
published 2022-10-11CVE-2022-20417: In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.10%
0.9th percentile
In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-237288416
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | hardware_interfaces | >= 12:0 < 12:2022-10-01 | 12:2022-10-01 |
| platform | hardware_interfaces | >= 12L:0 < 12L:2022-10-01 | 12L:2022-10-01 |
| platform | hardware_interfaces | >= 13:0 < 13:2022-10-01 | 13:2022-10-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android 12.0/13.0 HidlUtils.cpp audioTransportsToHal out-of-bounds write (A-237288416 / EUVD-2022-25677)
vuldb·2026-04-13·CVSS 7.8
CVE-2022-20417 [HIGH] Google Android 12.0/13.0 HidlUtils.cpp audioTransportsToHal out-of-bounds write (A-237288416 / EUVD-2022-25677)
A vulnerability was found in Google Android 12.0/13.0 and classified as critical. Affected by this issue is the function audioTransportsToHal of the file HidlUtils.cpp. Such manipulation leads to out-of-bounds write.
This vulnerability is uniquely identified as CVE-2022-20417. Local access is required to approach this attack. No exploit exists.
It is best practice to apply a patch to resolve this issue.
VulDB
Google Android out-of-bounds write (A-237288416 / EUVD-2022-25677)
vuldb·2026-04-13·CVSS 7.8
CVE-2022-20417 [HIGH] Google Android out-of-bounds write (A-237288416 / EUVD-2022-25677)
A vulnerability labeled as problematic has been found in Google Android. This issue affects some unknown processing. Executing a manipulation can lead to out-of-bounds write.
This vulnerability is handled as CVE-2022-20417. It is possible to launch the attack on the local host. There is not any exploit available.
It is best practice to apply a patch to resolve this issue.
GHSA
GHSA-m3xf-qw2h-4pxh: In audioTransportsToHal of HidlUtils
ghsa_unreviewed·2022-10-12
CVE-2022-20417 [HIGH] CWE-787 GHSA-m3xf-qw2h-4pxh: In audioTransportsToHal of HidlUtils
In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-237288416
OSV
CVE-2022-20417: In audioTransportsToHal of HidlUtils
osv·2022-10-01
CVE-2022-20417 CVE-2022-20417: In audioTransportsToHal of HidlUtils
In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Android
CVE-2022-20417: Android Security Bulletin 2022-10-01
CVE: CVE-2022-20417
Severity: HIGH
Type: EoP
Affected AOSP versions: 12, 12L, 13
References: A-237288416
vendor_android·2022-10-01·CVSS 7.8
CVE-2022-20417 [HIGH] CVE-2022-20417: Android Security Bulletin 2022-10-01
CVE: CVE-2022-20417
Severity: HIGH
Type: EoP
Affected AOSP versions: 12, 12L, 13
References: A-237288416
Android Security Bulletin 2022-10-01
CVE: CVE-2022-20417
Severity: HIGH
Type: EoP
Affected AOSP versions: 12, 12L, 13
References: A-237288416
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-11
Published