Home / Vulnerabilities / CVE-2022-22265
MEDIUM SEVERITY
CVE-2022-22265Samsung · Mobile Devices

Samsung Mobile Devices Use-After-Free Vulnerability

Technical Severity

CVSS v3.1 Metrics

MEDIUM
5 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Exploitation Likelihood

EPSS Prediction

0.18 %
Predictive Probability
Percentile Rank
39.9 th

Documented as more likely to be exploited than 39.9% of known CVEs.

Detection Date

Sep 18, 2023

Remediation Due

Oct 09, 2023

CISA Catalog Active

Threat Analysis

Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.

Remediation Directive

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

External Intelligence

https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1

https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2022-22265