CVE-2022-20116

CVE-2022-20116 affects Android 12/12L, arising from onEntryUpdated in OngoingCallController.kt where an intent redirection allows launching non-exported activities. This enables local elevation of privilege with no user interaction required, given User execution privileges. The issue is documente...