CVE-2022-20122

CVE-2022-20122 is a critical vulnerability affecting Android devices with PowerVR GPUs, allowing unprivileged applications to corrupt kernel memory. This is achieved by manipulating pinned memory, unpinning it, and then continuing to use the freed page in subsequent GPU calls. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential future interest from threat actors.