CVE-2022-20354

In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2022-20354

In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2022-20354

CVE-2022-20354 affects Android 11, 12 and 12L. The issue is in the VPN subsystem (onDefaultNetworkChanged in Vpn.java) and arises from a logic error that can allow disabling VPN, enabling local elevation of privilege with no extra execution privileges required. The impact is described as local Eo...