{"id":"PUB-A-228096042","aliases":["2784147","A-228096042","CVE-2022-22078"],"modified":"2026-09-21T16:00:45.521740994Z","published":"2022-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-10-01"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/e4400040ab8c201e1ead978e1d3fa836197979e7"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5"}],"affected":[{"package":{"name":"abl/tianocore/edk2","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2022-10-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"spl":"2022-10-05","types":["Unknown"],"vanir_signatures":[{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"function":"HandleUbiImgFlash","file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"},"deprecated":false,"digest":{"length":1630,"function_hash":"140404414715509776877118858289887194677"},"id":"PUB-A-228096042-00103ea4","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"function":"HandleRawImgFlash","file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"},"deprecated":false,"digest":{"length":1655,"function_hash":"293720105837473445804696146789248091145"},"id":"PUB-A-228096042-0dbefb2e"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Library/BootLib/LinuxLoaderLib.c"},"deprecated":false,"digest":{"line_hashes":["17262887338964032482098646227324610216","239529379960207391754534184294342878700","118246587017367527993380360377535042420","148387221750160152071504034749439692116","79793450247717148130854816628853626919"],"threshold":0.9},"id":"PUB-A-228096042-0e5121c7","signature_type":"Line"},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Include/Library/PartitionTableUpdate.h"},"deprecated":false,"digest":{"line_hashes":["193523424337747988753125196952073427953","146352470130644657217803549040341454785","85086123175556868893475450798709142667"],"threshold":0.9},"id":"PUB-A-228096042-20cff45d"},{"id":"PUB-A-228096042-2de8c604","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/avb/libavb/avb_ops.c","function":"AvbGetSizeOfPartition"},"deprecated":false,"digest":{"function_hash":"282923607308507625330779036271537879997","length":607}},{"digest":{"line_hashes":["166974588747381214117188593193668541330","102194266693955073894437391051521406756","61436007062159459717160802925477957859","270162427583375697341856316306395355592","62565575505801276005764005510354873930","295568863279255996316520936652915115866","6954497905521110015737689093043937045","289627507064253490116442104529511483778","226199937495217535632091964904595095211","295568863279255996316520936652915115866","130391711584754940174909625349215400665","22469307124999907098436003709031625023"],"threshold":0.9},"id":"PUB-A-228096042-3c9cf5d0","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Library/BootLib/PartitionTableUpdate.c"},"deprecated":false},{"digest":{"line_hashes":["166974588747381214117188593193668541330","160988910758593802419661515851797695950","148822500681339423245072073670940133470","262252422309022219508825361267747927614","62565575505801276005764005510354873930","295568863279255996316520936652915115866","6954497905521110015737689093043937045","289627507064253490116442104529511483778","226199937495217535632091964904595095211","295568863279255996316520936652915115866","204836929444200108689986794237036591173","234348882578740542105773918389034971864"],"threshold":0.9},"id":"PUB-A-228096042-3d7c659c","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/BootLib/PartitionTableUpdate.c"},"deprecated":false},{"deprecated":false,"digest":{"length":4977,"function_hash":"118454574957723125448995416062937251526"},"id":"PUB-A-228096042-404b719b","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Library/avb/libavb/avb_ops.c","function":"AvbReadFromPartition"}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"},"deprecated":false,"digest":{"line_hashes":["133594037298855091091276563070632381818","252519743324582636957566770650025525198","304115415325998870150977300384684225372","30765323593222213750215144649653923082","2468874955828561252961760685238439812","92878771756086791055401848610272927536","245776533322005554710773443850947088307","246890400291589599249264921221589960549","209038331544466734343378943210455621185","324806978520741829966584835560639686461","167162668881229240581189743628857033518","324180365414005593093544281152397398547","247558713545937129538647419031995126463","258481432693794741111523892022035595414","238991009170703527282883731626865769445","132642637431806169851264405599821088900","183061219675500787357851280005173321007","331426088272135598400312652246657679689","293325857047871528803444001186632703015","60320334015405886123191808413080193039","335392446183860716651697281646480067215","120730897132745430014496388138549020029","130066446331647422055374666667436821952","99654600686611870051922424408079676521","19086722431146947998037627223068484776","2115860650692157032635769799963596171","245712558248277865542003982898776267606","337473216587603221363519578860629544902","331302436337352550527867052629192720935","95923942438409421324150783854377290660","192251500035189375788450831827987091777","253190370867185435950346023127218379182","283140204871483475628893189930676052267","226708126916600969244893169800231781336","268930377296108167118950990129037267365","288554201388191292911470440982073364176","124585332711312441634244197545966334934","8554836562928831992742484824707037766","90649992688488153376503303259686240740","113108287645991463051908765188826970463","96112835158513130299606600917649349495","54549361459446100602506660111323539293","297788463913158920694821579359786633613","212195439703554352895975275524520054931","61599566936456116776298538379889657260","165447827648184020182199660062664358483","87641958357752141530293597494106151933","337530650722675576964998803904853630726","232691134767298534186568044453060616111","120049028673805290836890467441507390535","105033028675533877514158015567509834632"],"threshold":0.9},"id":"PUB-A-228096042-410a6b29","signature_type":"Line"},{"id":"PUB-A-228096042-43001101","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/BootLib/PartitionTableUpdate.c","function":"WriteGpt"},"deprecated":false,"digest":{"function_hash":"172842658662096332445186301449092895210","length":2932}},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c","function":"CmdFlash"},"deprecated":false,"digest":{"function_hash":"112499750676241475760751799873943939004","length":4678},"id":"PUB-A-228096042-4f3597ae","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"function":"ErasePartition","file":"QcomModulePkg/Library/BootLib/LinuxLoaderLib.c"},"deprecated":false,"digest":{"function_hash":"72583394770568791991109089676594218087","length":879},"id":"PUB-A-228096042-51d429ef"},{"target":{"file":"QcomModulePkg/Library/BootLib/PartitionTableUpdate.c","function":"UpdatePartitionAttributes"},"deprecated":false,"digest":{"function_hash":"147303476454975847135835067274947887014","length":4110},"id":"PUB-A-228096042-52953ec0","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/BootLib/Recovery.c"},"deprecated":false,"digest":{"line_hashes":["304938709569839297110480996046895179168","212615878616819294252921571191265986357","138706748963812062150965855067317965270","89767843684789965738133863135690895074","263144890961037038429274624170953294566","45346033499293979848840623580915997765"],"threshold":0.9},"id":"PUB-A-228096042-5b0eb752","signature_type":"Line"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"},"deprecated":false,"digest":{"line_hashes":["133594037298855091091276563070632381818","252519743324582636957566770650025525198","304115415325998870150977300384684225372","30765323593222213750215144649653923082","2468874955828561252961760685238439812","92878771756086791055401848610272927536","245776533322005554710773443850947088307","246890400291589599249264921221589960549","209038331544466734343378943210455621185","324806978520741829966584835560639686461","167162668881229240581189743628857033518","324180365414005593093544281152397398547","247558713545937129538647419031995126463","258481432693794741111523892022035595414","238991009170703527282883731626865769445","132642637431806169851264405599821088900","183061219675500787357851280005173321007","331426088272135598400312652246657679689","293325857047871528803444001186632703015","60320334015405886123191808413080193039","335392446183860716651697281646480067215","120730897132745430014496388138549020029","130066446331647422055374666667436821952","99654600686611870051922424408079676521","19086722431146947998037627223068484776","2115860650692157032635769799963596171","245712558248277865542003982898776267606","337473216587603221363519578860629544902","331302436337352550527867052629192720935","95923942438409421324150783854377290660","111943113152590580673107421087347963596","97992694103780066194329154458882569189","152802860236266320052974531765964731556","226708126916600969244893169800231781336","268930377296108167118950990129037267365","288554201388191292911470440982073364176","124585332711312441634244197545966334934","8554836562928831992742484824707037766","90649992688488153376503303259686240740","113108287645991463051908765188826970463","96112835158513130299606600917649349495","54549361459446100602506660111323539293","297788463913158920694821579359786633613","212195439703554352895975275524520054931","61599566936456116776298538379889657260","165447827648184020182199660062664358483","87641958357752141530293597494106151933","337530650722675576964998803904853630726","232691134767298534186568044453060616111","120049028673805290836890467441507390535","105033028675533877514158015567509834632"],"threshold":0.9},"id":"PUB-A-228096042-62aa665f","signature_type":"Line"},{"id":"PUB-A-228096042-728b94af","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Library/BootLib/Recovery.c"},"deprecated":false,"digest":{"line_hashes":["304938709569839297110480996046895179168","212615878616819294252921571191265986357","138706748963812062150965855067317965270","89767843684789965738133863135690895074","263144890961037038429274624170953294566","336779505772221564782193004782573963815"],"threshold":0.9}},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"function":"HandleSparseImgFlash","file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"},"deprecated":false,"digest":{"length":4163,"function_hash":"206705732333867385552603726858919641543"},"id":"PUB-A-228096042-752c5fad","signature_type":"Function","signature_version":"v1"},{"target":{"file":"QcomModulePkg/Library/BootLib/LinuxLoaderLib.c"},"deprecated":false,"digest":{"line_hashes":["17262887338964032482098646227324610216","239529379960207391754534184294342878700","118246587017367527993380360377535042420","148387221750160152071504034749439692116","79793450247717148130854816628853626919"],"threshold":0.9},"id":"PUB-A-228096042-837c00b6","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7"},{"deprecated":false,"digest":{"function_hash":"254471183106497497955775564654137570840","length":479},"id":"PUB-A-228096042-86c8a47b","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"function":"GetPartitionSize","file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"}},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Library/avb/libavb/avb_ops.c"},"deprecated":false,"digest":{"line_hashes":["321766113425200159944239885574865573731","132698964442060199027944419146438246208","45716514513824638918625918309448628625","44382701111746607796445139417310904619","114387219180053032840467193148776203671","300054410771763688048120979981546717931","192682885470397817168509128307779778816","296762102896704560117474608685036465268","309146457910028068829890238866426923109"],"threshold":0.9},"id":"PUB-A-228096042-8de5dfd8","signature_type":"Line"},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Include/Library/PartitionTableUpdate.h"},"deprecated":false,"digest":{"line_hashes":["271934520778420027084780603015935047559","85086123175556868893475450798709142667"],"threshold":0.9},"id":"PUB-A-228096042-8e7d6c63"},{"deprecated":false,"digest":{"function_hash":"223237979756122220070698527220984569824","length":5016},"id":"PUB-A-228096042-90d92284","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"function":"AvbReadFromPartition","file":"QcomModulePkg/Library/avb/libavb/avb_ops.c"}},{"digest":{"function_hash":"72583394770568791991109089676594218087","length":879},"id":"PUB-A-228096042-9fd39b82","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/BootLib/LinuxLoaderLib.c","function":"ErasePartition"},"deprecated":false},{"id":"PUB-A-228096042-a3d3d6dd","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/BootLib/LocateDeviceTree.c"},"deprecated":false,"digest":{"line_hashes":["299284457896921354249119966608827348464","251330529916814250118691756733557821045","136642908333594131215861536118249787467","288552601950078616538566810557877991739","214643566998829619334219411048051927714"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"208888839239425324408835950945914802621","length":2257},"id":"PUB-A-228096042-a88d0a54","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"function":"GetOvrdDtb","file":"QcomModulePkg/Library/BootLib/LocateDeviceTree.c"}},{"deprecated":false,"digest":{"function_hash":"293720105837473445804696146789248091145","length":1655},"id":"PUB-A-228096042-aa163929","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"function":"HandleRawImgFlash","file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"}},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Library/avb/libavb/avb_ops.c","function":"AvbGetSizeOfPartition"},"deprecated":false,"digest":{"function_hash":"282923607308507625330779036271537879997","length":607},"id":"PUB-A-228096042-b8c754d5","signature_type":"Function","signature_version":"v1"},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"function":"UpdatePartitionAttributes","file":"QcomModulePkg/Library/BootLib/PartitionTableUpdate.c"},"deprecated":false,"digest":{"function_hash":"107877193980973893507644943342379166555","length":4825},"id":"PUB-A-228096042-bc8b9013","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"249669578746281018613951587998834000360","length":3166},"id":"PUB-A-228096042-bd24c773","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"file":"QcomModulePkg/Library/BootLib/PartitionTableUpdate.c","function":"WriteGpt"},"deprecated":false},{"target":{"file":"QcomModulePkg/Library/avb/libavb/avb_ops.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321766113425200159944239885574865573731","132698964442060199027944419146438246208","45716514513824638918625918309448628625","44382701111746607796445139417310904619","114387219180053032840467193148776203671","300054410771763688048120979981546717931","192682885470397817168509128307779778816","296762102896704560117474608685036465268","309146457910028068829890238866426923109"]},"id":"PUB-A-228096042-beef4f7e","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7"},{"target":{"file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c","function":"CmdFlash"},"deprecated":false,"digest":{"function_hash":"23754840542898816691240413892848732845","length":4586},"id":"PUB-A-228096042-c0f4ce1c","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5","target":{"function":"ReadFromPartition","file":"QcomModulePkg/Library/BootLib/Recovery.c"},"deprecated":false,"digest":{"length":1318,"function_hash":"30033370595891763169302978057387453497"},"id":"PUB-A-228096042-c673e407"},{"target":{"function":"GetPartitionSize","file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"},"deprecated":false,"digest":{"length":479,"function_hash":"254471183106497497955775564654137570840"},"id":"PUB-A-228096042-cb74dfae","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/BootLib/Recovery.c","function":"ReadFromPartition"},"deprecated":false,"digest":{"function_hash":"30033370595891763169302978057387453497","length":1318},"id":"PUB-A-228096042-e8e34a0f"},{"id":"PUB-A-228096042-eb0b3ef8","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","target":{"file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c","function":"HandleUbiImgFlash"},"deprecated":false,"digest":{"function_hash":"140404414715509776877118858289887194677","length":1630}},{"target":{"function":"HandleSparseImgFlash","file":"QcomModulePkg/Library/FastbootLib/FastbootCmds.c"},"deprecated":false,"digest":{"function_hash":"206705732333867385552603726858919641543","length":4163},"id":"PUB-A-228096042-ebad8d7a","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5"}],"fixes":["https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/e4400040ab8c201e1ead978e1d3fa836197979e7","https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/6beaebcdc54d2a6983ee3f71b18b8ceef37f91b5"],"severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-228096042.json"}}],"schema_version":"1.9.0"}