Lucene search
Google_androidCVELIST:CVE-2022-20114HistoryMay 10, 2022 - 7:58 p.m.
CVE-2022-20114
2022-05-1019:58:54
google_android
raw.githubusercontent.com
1
0.0004 Low
EPSS
Percentile
5.2%
In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-211114016
Related
osv
osv
App can keep its service alive forever and can bypass one time permissions.
2022-05-01 00:00:00
cve
cve
CVE-2022-20114
2022-05-10 20:15:00
cnvd
cnvd
Google Android has an unspecified vulnerability (CNVD-2022-53377)
2022-06-24 00:00:00
prion
prion
Design/Logic Flaw
2022-05-10 20:15:00
androidsecurity
androidsecurity
Chromecast Security Bulletin—July 2022
2022-07-18 00:00:00