CVE-2022-20210: Android Modem NAS Message Parsing Vulnerability Leading to DoS or RCE
Summary
CVE-2022-20210: The UE and the EMM communicate with each other using NAS messages. Affects :unknown: versions >= SoCVersion:0, < SoCVersion:2022-06-05. Fixed in SoCVersion:2022-06-05. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects the Android ecosystem, specifically within the modem's handling of NAS (Non-Access Stratum) messages exchanged between the User Equipment (UE) and the Evolved Mobility Management (EMM). This communication is crucial for maintaining network connectivity and managing mobility in mobile devices. The modem's parsing code is responsible for interpreting these messages, and any flaws in this code can lead to severe security issues.
Vulnerability Detail
The vulnerability arises from a bug in the parsing code of NAS messages received from the EMM. An attacker can exploit this flaw to send specially crafted messages that cause the modem to crash. This can result in a Denial of Service (DoS), where legitimate users are unable to connect to the network, or Remote Code Execution (RCE), allowing attackers to execute arbitrary code on the affected device. The critical nature of this vulnerability is underscored by its potential to disrupt mobile services and compromise device security.
How To Fix
Minimum fixed version
SoCVersion:2022-06-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available to mitigate this vulnerability aside from applying the patch. Users should remain vigilant and avoid connecting to untrusted networks until the patch is applied.
Conclusion
CVE-2022-20210 represents a critical vulnerability in the Android modem's NAS message parsing functionality. Users are strongly advised to update their devices to the latest patched version to protect against potential DoS and RCE attacks. Staying informed and proactive in applying updates is essential for maintaining device security.
See every vulnerability recorded for :unknown: →
FAQ
CVE-2022-20210 is a vulnerability in the Android modem's NAS message parsing code that can lead to Denial of Service (DoS) or Remote Code Execution (RCE).
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for open-source vulnerabilities without requiring any signup.
If your device is affected, you should update it to the patched version available as of June 5, 2022, to mitigate the vulnerability.
The risks include potential Denial of Service (DoS), where users cannot connect to the network, and Remote Code Execution (RCE), which can allow attackers to execute malicious code on the device.
Currently, there are no specific workarounds. It is recommended to avoid connecting to untrusted networks until the patch is applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for :unknown:.
