CVE-2022-20417: Out of Bounds Write in audioProfileToHal Function in HidlUtils.cpp in android.hardware.audio.common@7.0-util
Summary
CVE-2022-20417: In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Affects platform/hardware/interfaces across 3 version ranges.
>= 12:0, < 12:2022-10-01
>= 12L:0, < 12L:2022-10-01
>= 13:0, < 13:2022-10-01
Fixed in 12:2022-10-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The android.hardware.audio.common@7.0-util package is a component of the Android ecosystem that provides utilities for audio-related functionalities. It is responsible for handling audio transports and profiles. This package is vulnerable to an out of bounds write issue in the audioProfileToHal function of the HidlUtils.cpp file. This vulnerability can potentially allow an attacker to escalate their privileges locally without requiring any additional execution privileges. Exploitation of this vulnerability does not require user interaction.
Vulnerability Detail
The vulnerability exists in the audioTransportsToHal function of HidlUtils.cpp. It is caused by an incorrect bounds check, which can result in an out of bounds write. An attacker could exploit this vulnerability to gain elevated privileges on the affected system. The impact of this vulnerability can vary depending on the privileges already possessed by the attacker. However, it is important to note that user interaction is not required for exploitation.
How To Fix
Minimum fixed version
12:2022-10-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The android.hardware.audio.common@7.0-util package is vulnerable to an out of bounds write issue in the audioProfileToHal function. This vulnerability can potentially allow an attacker to escalate their privileges locally without requiring any additional execution privileges. It is recommended to update to a fixed version of the package to mitigate the risk associated with this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/hardware/interfaces →
FAQ
This vulnerability can allow an attacker to escalate their privileges locally without requiring any additional execution privileges. However, the impact may vary depending on the privileges already possessed by the attacker.
No, user interaction is not required for exploitation of this vulnerability.
Versions 12 and 12L of the package are affected. The vulnerability was fixed in version 12, released on October 1, 2022.
This vulnerability is classified as High severity.
You can find more information about this vulnerability in the Android Open Source Project (AOSP) Security Bulletin ASB-A-237288416.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform/hardware/interfaces.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
