ASB-A-242846316 — Vulnetix

ASB-A-242846316 PUBLISHED

In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected Products

Vendor	Product	Versions
platform	frameworks/base	10:0, 10, 11:0

Exploit Intelligence

Trinadh465/frameworks_base_CVE-2022-20493 (github-poc)

Timeline

Jan 1, 2023 CVE Published
May 15, 2026 CVE Updated

References

https://source.android.com/security/bulletin/2023-01-01 advisory
https://android.googlesource.com/platform/frameworks/base/+/81352c3775949c622441e10b468766441e35edc7 patch

Open in Interactive Console →