CVE-2022-20060: Medium severity android vulnerability
In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06137462.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-20060.
What is the severity of CVE-2022-20060?
The severity of CVE-2022-20060 is medium (6.6).
How does CVE-2022-20060 occur?
CVE-2022-20060 occurs due to a missing proper image authentication in preloader (usb), which can lead to local escalation of privilege.
Which software versions are affected by CVE-2022-20060?
Google Android versions 10.0, 11.0, and 12.0 are affected by CVE-2022-20060.
How can CVE-2022-20060 be fixed?
To fix CVE-2022-20060, it is recommended to apply the necessary patches and updates provided by the software vendor.