CVE-2022-20041: High severity android vulnerability

Published Feb 9, 2022

Updated

In Bluetooth, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108596; Issue ID: ALPS06108596.

Affected Software

11 affected components

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android=12.0

MediaTek Mt8167

MediaTek Mt8175

MediaTek Mt8183

MediaTek Mt8362a

MediaTek Mt8365

MediaTek Mt8385

Event History

Feb 9, 2022

CVE Published

via MITRE·10:05 PM

Data Sourced

via MITRE·10:05 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-20041?

CVE-2022-20041 is considered a high-severity vulnerability due to its potential for local escalation of privilege.

How do I fix CVE-2022-20041?

To fix CVE-2022-20041, users should apply the relevant patches provided by Google for affected Android versions.

What versions of Android are affected by CVE-2022-20041?

CVE-2022-20041 affects Android versions 8.1, 9.0, 10.0, 11.0, and 12.0.

Is user interaction required to exploit CVE-2022-20041?

No, user interaction is not required for the exploitation of CVE-2022-20041.

What can be the consequences of CVE-2022-20041?

CVE-2022-20041 can lead to a local escalation of privilege without requiring additional execution privileges.