CVE-2022-20454: In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242096164
Overview
- Severity
- Medium (CVSS 6.7)
- CVSS Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Exploit Status
- Not Exploited
- Patch Tuesday
- 2022-Nov
- Released
- 2026-08-07
- Last Updated
- 2026-08-12
- EPSS Score
- 0.14% (percentile: 3.6%)
Affected Products (2)
Other
Revision History
- 2026-08-07: Information published.
- 2026-08-12: Information published.