cbcvebase.
CVE-2022-36855
published 2022-09-09

CVE-2022-36855: A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.10%
1.1th percentile
A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

Affected

4 ranges
VendorProductVersion rangeFixed in
googleandroid
googleandroid
googleandroid
samsung_mobilesamsung_mobile_devices>= Q(10), R(11), S(12) devices with exynos9810 and exynos9820 chipsets < SMR Sep-2022 Release 1SMR Sep-2022 Release 1
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.