CVE-2022-20461
published 2023-01-26CVE-2022-20461: In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.12%
2.0th percentile
In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-228602963
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | packages_modules_bluetooth | >= 13:0 < 13:2023-01-01 | 13:2023-01-01 |
| platform | system_bt | >= 10:0 < 10:2023-01-01 | 10:2023-01-01 |
| platform | system_bt | >= 11:0 < 11:2023-01-01 | 11:2023-01-01 |
| platform | system_bt | >= 12:0 < 12:2023-01-01 | 12:2023-01-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android 10.0/11.0/12.0/13.0 pinReplyNative out-of-bounds (A-228602963 / EUVD-2022-25721)
vuldb·2026-04-15·CVSS 7.8
CVE-2022-20461 [HIGH] Google Android 10.0/11.0/12.0/13.0 pinReplyNative out-of-bounds (A-228602963 / EUVD-2022-25721)
A vulnerability marked as problematic has been reported in Google Android 10.0/11.0/12.0/13.0. The affected element is the function pinReplyNative of the file com_android_bluetooth_btservice_AdapterService.cpp. Performing a manipulation results in out-of-bounds read.
This vulnerability is cataloged as CVE-2022-20461. The attack must be initiated from a local position. There is no exploit available.
It is suggested to install a patch to address this issue.
GHSA
GHSA-mhx4-xrcq-h9g5: In pinReplyNative of com_android_bluetooth_btservice_AdapterService
ghsa_unreviewed·2023-01-26
CVE-2022-20461 [HIGH] CWE-843 GHSA-mhx4-xrcq-h9g5: In pinReplyNative of com_android_bluetooth_btservice_AdapterService
In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-228602963
OSV
CVE-2022-20461: In pinReplyNative of com_android_bluetooth_btservice_AdapterService
osv·2023-01-01
CVE-2022-20461 CVE-2022-20461: In pinReplyNative of com_android_bluetooth_btservice_AdapterService
In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege of BLE with no additional execution privileges needed. User interaction is not needed for exploitation.
Android
CVE-2022-20461: Android Security Bulletin 2023-01-01
CVE: CVE-2022-20461
Severity: HIGH
Type: EoP
Affected AOSP versions: 10, 11, 12, 12L, 13
References: A-228602963
vendor_android·2023-01-01·CVSS 7.8
CVE-2022-20461 [HIGH] CVE-2022-20461: Android Security Bulletin 2023-01-01
CVE: CVE-2022-20461
Severity: HIGH
Type: EoP
Affected AOSP versions: 10, 11, 12, 12L, 13
References: A-228602963
Android Security Bulletin 2023-01-01
CVE: CVE-2022-20461
Severity: HIGH
Type: EoP
Affected AOSP versions: 10, 11, 12, 12L, 13
References: A-228602963
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-01-26
Published