CVE-2022-0343lowCWE-275

CVE-2022-0343: low-severity vulnerability in Google LLC Perfetto Dev Scripts

Local Priviledge escalation in Perfetto Dev scripts

Published · Updated

Follow this CVE+ Monitor Perfetto Dev Scripts

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.3epss 0.1%
A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Affected products
Google LLC · Perfetto Dev Scripts