NetSight
medium6.4

CVE-2022-23432

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

Impact

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0, 12.0

Weakness classification

References