frameworks_base_AOSP_10_r33_CVE-2022-20338

This repository does not have a README...

frameworks_base_AOSP_06_r22_CVE-2022-20338

This repository does not have a README...

CVE-2022-20338

In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to a local escalation of privilege, preventing processes from validating URIs correctly, with no additional execution privileges needed. User...

ASB-A-261721900

In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-20338

creationtimestamp| type| source ---|---|--- 2022-08-12 18:33:39+00:00| seen| https://t.me/cibsecurity/48036 2023-11-17 07:02:37+00:00| seen| https://t.me/arpsyndicate/227 2023-11-19 15:15:39+00:00| seen| https://t.me/arpsyndicate/272 2026-09-18 04:00:14+00:00| seen|...

CVE-2022-20338

Summary: CVE-2022-20338 affects Android (Android-11, Android-12, Android-12L, Android-13) due to a vulnerability in HierarchicalUri.readFrom in Uri.java that allows crafting a malformed URI because of improper input validation, enabling local escalation of privilege without extra execution privil...