VDB

CISA-2022-20484

CISA-2022-20484 PUBLISHED CVSS 7.8 HIGH

Reported by google_android · Published December 13, 2022

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242702851

Risk Scores

CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
n/aAndroidAndroid-10 Android-11 Android-12 Android-12L Android-13
n/aAndroidAndroid-10 Android-11 Android-12 Android-12L Android-13, Android-10 Android-11 Android-12 Android-12L Android-13

Timeline

  • Dec 13, 2022 CVE Published
  • Apr 22, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›