CVE-2022-20142

In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20142

CVE-2022-20142 affects Android (10, 11, 12, 12L) where the issue resides in GeofenceHardwareRequestParcelable.java: createFromParcel, causing an arbitrary code execution due to a parcel mismatch and enabling local privilege escalation with no extra privileges or user interaction. Connected source...