Lucene search
Google_androidCVELIST:CVE-2022-20486HistoryDec 13, 2022 - 12:00 a.m.
CVE-2022-20486
2022-12-1300:00:00
google_android
www.cve.org
notificationchannel
android
resource exhaustion
privilege escalation
permissions
local escalation
android-10
android-11
android-12
android-12l
android-13
0.0004 Low
EPSS
Percentile
5.1%
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703118
CNA Affected
[
{
"vendor": "n/a",
"product": "Android",
"versions": [
{
"version": "Android-10 Android-11 Android-12 Android-12L Android-13",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2022-20486
2022-12-13 16:15:16
cnvd
cnvd
Google Android Elevation of Privilege Vulnerability (CNVD-2023-07646)
2022-12-12 00:00:00
nvd
nvd
CVE-2022-20486
2022-12-13 16:15:16
ubuntucve
ubuntucve
CVE-2022-20486
2022-12-13 00:00:00
osv
osv
prion
prion
Code injection
2022-12-13 16:15:00