Lucene search
Google_androidCVELIST:CVE-2022-20487HistoryDec 13, 2022 - 12:00 a.m.
CVE-2022-20487
2022-12-1300:00:00
google_android
www.cve.org
3
notificationchannel
resource exhaustion
permissions settings
local privilege escalation
android-10
android-11
android-12
android-12l
android-13
a-242703202
EPSS
0
Percentile
5.1%
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703202
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-10 Android-11 Android-12 Android-12L Android-13",
"status": "affected"
}
]
}
]Related
prion
prion
Code injection
2022-12-13 16:15:00
osv
osv
cve
cve
CVE-2022-20487
2022-12-13 16:15:16
nvd
nvd
CVE-2022-20487
2022-12-13 16:15:16
ubuntucve
ubuntucve
CVE-2022-20487
2022-12-13 00:00:00