CVE-2022-20005: Undefined Security Weakness

In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-14252

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue is related to the validateApkInstallLocked function in PackageInstallerSession.java, where a mismatch can be forced between running code and a parsed APK. This could lead to...