CVE-2012-6422

CVE-2012-6422 is a critical privilege escalation vulnerability affecting Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and other Android devices utilizing Exynos 4210 or 4412 processors. The vulnerability stems from weak permissions (0666) on the /dev/exynos-mem device, allowing malicious applications to read or write arbitrary physical memory. This flaw has a CVSS score of 9.3, indicating a high severity with network-based attacks, medium complexity, and complete confidentiality, integrity, and availability impacts. While an exploit demonstration (ExynosAbuse) exists, there is no evidence of active exploitation, and no public exploit modules or significant community discussion have been identified.