CVE-2022-0247 — Write access to VMO data through copy-on-write in Fuchsia

CVE-2022-0247

Write access to VMO data through copy-on-write in Fuchsia PUBLISHED

Description (CNA)

An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions.

Affected (CNA)

Vendor / product	Versions
Google LLC / Fuchsia	affected unspecified before 4.1

CWE

CWE-732

References

https://fuchsia.googlesource.com/fuchsia/+/d97c05d2301799ed585620a9c5c739d36e7b5d3d

ADP enrichment

CVE

No English description supplied.

https://fuchsia.googlesource.com/fuchsia/+/d97c05d2301799ed585620a9c5c739d36e7b5d3d

CISA-ADP

No English description supplied.

No references supplied.