CVE-2022-32612
published 2022-11-08CVE-2022-32612: In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed…
PriorityP426medium6.4CVSS 3.1
AVLACHPRHUINSUCHIHAH
EPSS
0.10%
0.9th percentile
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203500; Issue ID: ALPS07203500.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android vcu use after free (ALPS07203500 / EUVD-2022-35678)
vuldb·2026-05-31·CVSS 6.4
CVE-2022-32612 [MEDIUM] Google Android vcu use after free (ALPS07203500 / EUVD-2022-35678)
A vulnerability categorized as critical has been discovered in Google Android. The impacted element is an unknown function of the component vcu. Such manipulation leads to use after free.
This vulnerability is uniquely identified as CVE-2022-32612. Local access is required to approach this attack. No exploit exists.
A patch should be applied to remediate this issue.
GHSA
GHSA-26qf-c8f8-mrg9: In vcu, there is a possible use after free due to a race condition
ghsa_unreviewed·2022-11-09
CVE-2022-32612 [MEDIUM] CWE-662 GHSA-26qf-c8f8-mrg9: In vcu, there is a possible use after free due to a race condition
In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07203500; Issue ID: ALPS07203500.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-11-08
Published