CVE-2022-20134

2022-06-1513:01:06

google_android

www.cve.org

callsubjectdialog

input validation

local escalation

EPSS

Percentile

5.1%

JSON

In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-218341397

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-10 Android-11 Android-12 Android-12L"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2022-06-01

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-20134