Lucene search
Google_androidCVELIST:CVE-2022-20453HistoryNov 08, 2022 - 12:00 a.m.
CVE-2022-20453
2022-11-0800:00:00
google_android
www.cve.org
4
mmsprovider.java update
directory permissions
local denial of service
sim recognition
android-10
android-11
android-12
android-12l
android-13
a-240685104
EPSS
0.001
Percentile
17.6%
In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-240685104
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-10 Android-11 Android-12 Android-12L Android-13",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2022-20453
2022-11-08 22:15:11
cnvd
cnvd
Google Android path traversal vulnerability
2022-11-11 00:00:00
osv
osv
Path traversal in MmsProvider#update leading to permanent DoS
2022-11-01 00:00:00
prion
prion
Path traversal
2022-11-08 22:15:00
nvd
nvd
CVE-2022-20453
2022-11-08 22:15:11