VIR Vulnerability Intelligence Relay

CVE-2022-22265

unknown KEV
Published 2023-09-18 · Modified 2023-09-18
CVSS v3
—
CVSS v2
—
VIR risk
1.5

Description

Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.

CISA KEV

Vendor
Samsung
Product
Mobile Devices
Due date
2023-10-09

Predictions

Exploit likelihood
99%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cisa-kev — https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1; https://nvd.nist.gov/vuln/detail/CVE-2022-22265

Exploits

References

Verify integrity in audit chain (admin only). AS-IS.