CVE-2022-27821 — Out-of-bounds Read in Mobile Devices

CWE-125 — Out-of-bounds Read3 documents3 sources

Severity

5.5MEDIUMNVD

CNA4.0

EPSS

0.1%

top 84.60%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Mobile Devices Google Android

Timeline

PublishedApr 11

Latest updateApr 12

Description

Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5samsung_mobile/samsung_mobile_devicesO(10), R(11), S(12) — SMR Apr-2022 Release 1

▶NVDgoogle/android10.0, 11.0, 12.0+2

🔴Vulnerability Details

GHSA

GHSA-27p4-mjh7-m9j7: Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file↗2022-04-12

▶

CVEList

CVE-2022-27821: Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file↗2022-04-11

▶