CVE-2022-20319

In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2022-20319

creationtimestamp| type| source ---|---|--- 2022-08-12 18:39:42+00:00| seen| https://t.me/cibsecurity/48056...

CVE-2022-20319

CVE-2022-20319 affects Android 13 via DreamServices, where a confused deputy could launch arbitrary protected activities, causing local escalation of privilege. Exploitation is described as local (attack vector: LOCAL) with low privileges required and no user interaction needed, potentially eleva...