CVE-2022-20491

2022-12-1300:00:00

google_android

www.cve.org

notificationchannel

android

local privilege escalation

resource exhaustion

permissions settings

0.0004 Low

EPSS

Percentile

5.1%

JSON

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703556

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-10 Android-11 Android-12 Android-12L Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2022-12-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-20491