CVE-2022-20492

2023-01-2400:00:00

google_android

www.cve.org

automaticzenrule

resource exhaustion

persistence

permissions settings

local escalation

privilege

android-10

android-11

android-12

android-12l

android-13

a-242704043

0.0004 Low

EPSS

Percentile

5.1%

JSON

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242704043

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-10 Android-11 Android-12 Android-12L Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2023-01-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-20492