CVE-2022-33691 — Time-of-check Time-of-use (TOCTOU) Race Condition in Mobile Devices
Severity
4.7MEDIUMNVD
CNA6.2
EPSS
0.0%
top 98.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 12
Latest updateJul 13
Description
A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious operations.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.0 | Impact: 3.6
Affected Packages2 packages
▶CVEListV5samsung_mobile/samsung_mobile_devicesQ(10), R(11), S(12) devices with Exynos 9820 chipset — SMR Jul-2022 Release 1
🔴Vulnerability Details
2GHSA▶
GHSA-r5c3-hhrg-7v44: A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious operations↗2022-07-13
CVEList▶
CVE-2022-33691: A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious operations↗2022-07-11