Live › vulnerability › CVE-2022-22265
Go to dashboardA use-after-free flaw in Samsung mobile devices with selected Exynos chipsets lets malicious code write to memory. An attacker can use it to run code on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Samsung Mobile Devices | vendor | – | – |
| google android | vendor | = 9.0 | – |
| google android | vendor | = 10.0 | – |
| google android | vendor | = 11.0 | – |
| google android | vendor | = 12.0 | – |
Unknown from the sources.
Apply the Samsung security update for affected devices, or follow vendor mitigation instructions; CISA says to discontinue use if mitigations are unavailable.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2022-22265")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.