CVE-2022-20002: High severity android vulnerability

Published Mar 30, 2022

Updated

In incfs, there is a possible way of mounting on arbitrary paths due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-198657657

Affected Software

1 affected component

Google Android=12.1

Event History

Mar 30, 2022

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

DescriptionWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Exploitation requires local access with low privileges. No user interaction is required.

What level of access could successful exploitation provide?

Successful exploitation could result in local privilege escalation to System execution privileges.

Which Android release is identified as affected?

The affected version listed is Android 12L.

CVE-2022-20002: High severity android vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What level of access could successful exploitation provide?

Which Android release is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What level of access could successful exploitation provide?

Which Android release is identified as affected?