CVE-2022-0343 — Local Priviledge escalation in Perfetto Dev scripts

CVE-2022-0343

Local Priviledge escalation in Perfetto Dev scripts PUBLISHED

Description (CNA)

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2

Affected (CNA)

Vendor / product	Versions
Google LLC / Perfetto Dev Scripts	affected unspecified through 24.2

CWE

CWE-275

References

https://android-review.googlesource.com/c/platform/external/perfetto/+/1999296/

ADP enrichment

CVE

No English description supplied.

https://android-review.googlesource.com/c/platform/external/perfetto/+/1999296/

CISA-ADP

No English description supplied.

No references supplied.