CVE-2022-20357

In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

CVE-2022-20357

creationtimestamp| type| source ---|---|--- 2022-08-11 00:32:32+00:00| seen| https://t.me/cibsecurity/47922...

CVE-2022-20357

The CVE-2022-20357 issue affects Android 12 (and 12L) and relates to writeToParcel in SurfaceControl.cpp, enabling local information disclosure due to uninitialized data. The impact is local information disclosure with no additional execution privileges needed; user interaction is not required. M...