CVE-2022-20146

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information disclosure of private files with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-211757677References: N/A

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-201477.8In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to loca CVE-2022-201486.4In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel wi CVE-2022-201497.5Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A CVE-2022-20155.4Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 19.0.2.CVE-2022-201517.5Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A CVE-2022-201526.7In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege CVE-2022-201536.7In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of CVE-2022-201546.4In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege CVE-2022-201557.0In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition.CVE-2022-201567.8In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local e CVE-2022-201586.7In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local esca CVE-2022-201594.4In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could