CVE-2022-20448

The CVE-2022-20448 issue affects Android (10–13) via the buzzBeepBlinkLocked path in NotificationManagerService.java, enabling data sharing across users due to a permissions bypass and resulting in local privilege escalation without extra execution privileges. The exposed component is Android’s N...