{"id":"PUB-A-192743373","details":"In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-192743373","CVE-2022-20208"],"modified":"2026-09-21T16:00:45.521740994Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"}],"affected":[{"package":{"name":"platform/external/libcppbor","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L-next:0"},{"fixed":"12L-next:2022-06-01"}]}],"versions":["12L-next"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/external/libcppbor/+/8f4908840cdd9cc2fe0442033516a273046598a2","target":{"file":"src/cppbor_parse.cpp"},"deprecated":false,"digest":{"line_hashes":["214006676979829370022855787617958720337","46798976866392512249732004896809236455","87780555174337280066216474256317773261","237927448834004137610321113279073805263"],"threshold":0.9},"id":"PUB-A-192743373-2b12aa34","match_only_versions":["12L-next"],"signature_type":"Line","signature_version":"v1"},{"target":{"function":"parseRecursively","file":"src/cppbor_parse.cpp"},"deprecated":false,"digest":{"function_hash":"260938830239941536222508966363509555935","length":2335},"id":"PUB-A-192743373-ac264d66","match_only_versions":["12L-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libcppbor/+/8f4908840cdd9cc2fe0442033516a273046598a2"}],"fixes":["https://android.googlesource.com/platform/external/libcppbor/+/8f4908840cdd9cc2fe0442033516a273046598a2"],"severity":"Moderate","spl":"2022-06-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-192743373.json"}},{"package":{"name":"platform/external/libcppbor","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/external/libcppbor/+/8f4908840cdd9cc2fe0442033516a273046598a2"],"severity":"Moderate","spl":"2022-06-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["214006676979829370022855787617958720337","46798976866392512249732004896809236455","87780555174337280066216474256317773261","237927448834004137610321113279073805263"],"threshold":0.9},"id":"PUB-A-192743373-426b7de9","match_only_versions":["12L"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/external/libcppbor/+/8f4908840cdd9cc2fe0442033516a273046598a2","target":{"file":"src/cppbor_parse.cpp"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/external/libcppbor/+/8f4908840cdd9cc2fe0442033516a273046598a2","target":{"function":"parseRecursively","file":"src/cppbor_parse.cpp"},"deprecated":false,"digest":{"length":2335,"function_hash":"260938830239941536222508966363509555935"},"id":"PUB-A-192743373-6e93dc1d","match_only_versions":["12L"],"signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-192743373.json"}}],"schema_version":"1.9.0"}