Lucene search
Google_androidCVELIST:CVE-2022-20488HistoryDec 13, 2022 - 12:00 a.m.
CVE-2022-20488
2022-12-1300:00:00
google_android
www.cve.org
notificationchannel
failure to persist
permissions settings
local privilege escalation
android-10
android-11
android-12
android-12l
android-13
resource exhaustion
0.0004 Low
EPSS
Percentile
5.1%
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703217
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-10 Android-11 Android-12 Android-12L Android-13",
"status": "affected"
}
]
}
]Related
prion
prion
Code injection
2022-12-13 16:15:00
nvd
nvd
CVE-2022-20488
2022-12-13 16:15:16
ubuntucve
ubuntucve
CVE-2022-20488
2022-12-13 00:00:00
osv
osv
cve
cve
CVE-2022-20488
2022-12-13 16:15:16