CVE-2022-20465 (Medium) detected in baseandroid-10.0.0_r34, baseandroid-10.0.0_r34
mend-bolt-for-github opened this issue · 0 comments
mend-bolt-for-github commented
CVE-2022-20465 - Medium Severity Vulnerability
Vulnerability Details
In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-218500036
Publish Date: 2022-11-08
URL: CVE-2022-20465
CVSS 3 Score Details (4.6)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Physical
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: None
Suggested Fix
Type: Upgrade version
Origin: https://source.android.com/docs/security/bulletin/2022-11-01
Release Date: 2022-11-08
Fix Resolution: android-13.0.0_r12
Step up your Open Source Security Game with Mend here