Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-20193

Опубликовано: 15 июн. 2022
Источник: nvd
CVSS3: 7.3
CVSS2: 4.4
EPSS Низкий

Описание

In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalation of privilege by conflating apps with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-212434116

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:12.1:*:*:*:*:*:*:*

EPSS

Процентиль: 3%
0.00015
Низкий

7.3 High

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.3
github
больше 3 лет назад

In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalation of privilege by conflating apps with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-212434116

EPSS

Процентиль: 3%
0.00015
Низкий

7.3 High

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo