CVE-2022-20474

In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20474

creationtimestamp| type| source ---|---|--- 2022-12-13 18:27:56+00:00| seen| https://t.me/cibsecurity/54426...

CVE-2022-20474

In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20474

CVE-2022-20474 affects Android (10–13) and is due to a flaw in Parcel.readLazyValue in Parcel.java that can load arbitrary code into the System Settings app via a confused deputy. The vulnerability enables local privilege escalation without extra execution privileges and does not require user int...