Lucene search
Google_androidCVELIST:CVE-2022-20485HistoryDec 13, 2022 - 12:00 a.m.
CVE-2022-20485
2022-12-1300:00:00
google_android
www.cve.org
notificationchannel
android-10
android-11
android-12
android-12l
android-13
resource exhaustion
local escalation
0.0004 Low
EPSS
Percentile
5.1%
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242702935
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-10 Android-11 Android-12 Android-12L Android-13",
"status": "affected"
}
]
}
]Related
ubuntucve
ubuntucve
CVE-2022-20485
2022-12-13 00:00:00
cve
cve
CVE-2022-20485
2022-12-13 16:15:16
prion
prion
Code injection
2022-12-13 16:15:00
osv
osv
nvd
nvd
CVE-2022-20485
2022-12-13 16:15:16
cnvd
cnvd
Google Android Elevation of Privilege Vulnerability (CNVD-2022-89770)
2022-12-12 00:00:00