Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-20350
HistoryAug 10, 2022 - 8:15 p.m.

Input validation

2022-08-1020:15:00
PRIOn knowledge base
www.prio-n.com
5

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228178437

CPENameOperatorVersion
androideq10.0
androideq11.0
androideq12.0
androideq12.1

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2022-20350