Skip to content
COOEY

EXPOSURES › CVE-2022-22265

CVE-2022-22265

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2023-09-18 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-22265 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 rceexploited-in-wildunpatched

Samsung Exynos chipsets allow malicious memory write and code execution.

Samsung Mobile Devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution. This can enable remote code execution, posing a significant risk to the defense-industrial base. Organizations should ensure their devices are up to date with the latest security patches.

Shame score — The vulnerability is actively exploited and allows for remote code execution, which is a severe security risk.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.