CVE-2022-20505
published 2022-12-16CVE-2022-20505: In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with…
PriorityP428medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.13%
3.2th percentile
In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitationProduct: AndroidVersions: Android-13Android ID: A-225981754
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| platform | packages_providers_contactsprovider | >= 13:0 < 13:2022-12-01 | 13:2022-12-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gmm8-v646-j3w9: In openFile of CallLogProvider
ghsa_unreviewed·2022-12-20
CVE-2022-20505 [MEDIUM] CWE-22 GHSA-gmm8-v646-j3w9: In openFile of CallLogProvider
In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitationProduct: AndroidVersions: Android-13Android ID: A-225981754
OSV
CVE-2022-20505: In openFile of CallLogProvider
osv·2022-12-01
CVE-2022-20505 CVE-2022-20505: In openFile of CallLogProvider
In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-16
Published