AIX: Local Priv Esc via OOB Write in Mailbox (CVE202226435)
CVE-2022-26435 Published on August 1, 2022

In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138435; Issue ID: ALPS07138435.

NVD


Products Associated with CVE-2022-26435

Want to know whenever a new CVE is published for IBM Aix? stack.watch will email you.

IBM Aix
 

Affected Versions

MediaTek, Inc. MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8532, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 Version Android 11.0, 12.0 or Yocto 3.1, 3.3 is affected by CVE-2022-26435

Exploit Probability

EPSS
0.02%
Percentile
3.63%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.