Vulnetix
Try Vulnetix Request Demo
CVE-2022-20395 PUBLISHED

In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-221855295

EPSS 0.01% · 1.5th percentile

Risk Scores

EPSS Score
0.01%
1.5th percentile

Affected Products

VendorProductVersions
googleandroid11.0, 12.0, 12.1
n/aAndroidAndroid-11 Android-12 Android-12L Android-13

Timeline

References

Open in Interactive Console →