CVE-2022-20314

2022-08-1115:24:53

google_android

www.cve.org

keychain

spoofing

local privilege

android-13

cve-2022-20314

input validation

AI Score

7.3

Confidence

High

EPSS

Percentile

5.1%

JSON

In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-13"
      }
    ]
  }
]

References

source.android.com/security/bulletin/android-13