Lucene search
Google_androidCVELIST:CVE-2022-20395HistorySep 13, 2022 - 7:14 p.m.
CVE-2022-20395
2022-09-1319:14:57
google_android
www.cve.org
mediaprovider
path traversal
local escalation
android-11
android-12
android-12l
android-13
0.0004 Low
EPSS
Percentile
9.9%
In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-221855295
CNA Affected
[
{
"product": "Android",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android-11 Android-12 Android-12L Android-13"
}
]
}
]Related
prion
prion
Path traversal
2022-09-13 20:15:00
osv
osv
Path Traversal in MediaProvider#delete
2022-09-01 00:00:00
cve
cve
CVE-2022-20395
2022-09-13 20:15:09
nvd
nvd
CVE-2022-20395
2022-09-13 20:15:09