CVE-2022-20558

In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20558

In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20558

CVE-2022-20558 affects Android 13. The vulnerability resides in DeviceCapabilityListener.java (registerReceivers) and can bypass permissions to change the preferred TTY mode, enabling local privilege escalation with no extra execution privileges and no user interaction. The issue is documented in...