CVE-2022-22265
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
High
Known exploited
- Severity
- 7.8 / 10
- High · CVSS 3.1
- Exploit chance (EPSS)
- 0.42%
- Chance of exploitation in the next 30 days. Higher than 36.16% of scored vulnerabilities.
- Known exploited
- Yes
- In CISA's catalog since Sep 18, 2023
- Weakness
- CWE-703 Improper Check or Handling of Exceptional Conditions
- Fix
- None yet
- No fixed version published
Exploited in the wild. Samsung Mobile Devices Use-After-Free Vulnerability (Samsung Mobile Devices). Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due for U.S. federal agencies by Oct 9, 2023.
Description
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
How to fix
No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.
Severity breakdown
CVSS 3.1 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Weakness
CWE-703: Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
References
Advisories
Other links
Timeline
- Published
- Added to CISA's Known Exploited Vulnerabilities catalog
- Remediation due for U.S. federal agencies
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-2v2p-6j97-cjg9 vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process | Medium | Same weakness, CWE-703 |
| GHSA-gjq8-xm47-88rc vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process | High | Same weakness, CWE-703 |
| GHSA-4mjr-xmp4-gh2g qs: Denial of Service via Attacker Controlled isBuffer | Medium | Same weakness, CWE-703 |
| GHSA-qh5g-q395-cx4j ImageMagick: Heap-use-after-free via XMP profile could result in a crash | Medium | Same weakness, CWE-703 |
| GHSA-w254-4hp5-7cvv Fleet vulnerable to Denial of Service via unhandled gRPC log type in launcher endpoint | High | Same weakness, CWE-703 |
| GHSA-3cx6-j9j4-54mp Decidim's private data exports can lead to data leaks | Medium | Same weakness, CWE-703 |
| GHSA-rcmh-qjqh-p98v Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls | High | Same weakness, CWE-703 |
| GHSA-gpx4-37g2-c8pv Argo CD Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook | High | Same weakness, CWE-703 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor