CVE-2022-20457

2022-11-0800:00:00

google_android

www.cve.org

storagemanagerservice

privilege escalation

android-13

input validation

package installation

0.0004 Low

EPSS

Percentile

5.1%

JSON

In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-243924784

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2022-11-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-20457