EUVD-2022-25405

Malicious code in bioql PyPI...

Android startLegacyVpnPrivileged Privilege Escalation

The vulnerability of the startLegacyVpnPrivileged component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2022-20145

In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...

PT-2022-3185

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a protocol downgrade attack in the startLegacyVpnPrivileged component of Vpn.java, which could allow retrieval of VPN credentials. This might lead to remote escalation of privileg...