CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability

CVE-2022-22265 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2023-09-18

A use-after-free vulnerability in the NPU driver of Samsung Mobile devices with Exynos chipsets allows for arbitrary memory writes and code execution. The flaw stems from improper handling of exceptional conditions and requires local access for exploitation.

Technologies: Samsung Mobile Devices. Vendors: Samsung.

Quick answers

Is CVE-2022-22265 exploited in the wild?
Yes. CVE-2022-22265 is known to be exploited in the wild, first recorded on 18 September 2023. Treat it as urgent.
How severe is CVE-2022-22265?
Critical severity, with a CVSS score of 7.8, published 18 September 2023.
Which products and versions are affected?
Samsung Exynos Chipsets Prior to SMR Jan-2022 Release 1; Google Android 9.0; Google Android 10.0; Google Android 11.0; and 1 more.
Is there a fix for CVE-2022-22265?
A patch was published on 2022-01-01: SMR Jan-2022 Release 1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2022-22265 attacked?
It is attacked with local access, in an operating system.
Am I affected by CVE-2022-22265?
Check whether you run Samsung Mobile Devices. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

  • Samsung Exynos Chipsets Prior to SMR Jan-2022 Release 1
  • Google Android 9.0
  • Google Android 10.0
  • Google Android 11.0
  • Google Android 12.0

Timeline

  • 2022-01-10: disclosed: NVD Published Date
  • 2022-01-01: patched: SMR Jan-2022 Release 1
  • 2023-09-18: kev added: Added to CISA Known Exploited Vulnerabilities Catalog

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.