2 matches found
CVE-2022-20005: Undefined Security Weakness
In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
7.8CVSS7.4AI score0.00229EPSS
SaveExploits0References1
20