CVE-2022-20432

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

There is an missing authorization issue in the system service. Since the component does not have permission check and permission protection,, resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242221899

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Oct 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-204337.8There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Eleva CVE-2022-204347.8There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Eleva CVE-2022-204357.8There is a Unauthorized service in the system service, may cause the system reboot. Since the component does not have permission check and p CVE-2022-204367.8There is an unauthorized service in the system service. Since the component does not have permission check, resulting in Local Elevation of CVE-2022-204375.5In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-24 CVE-2022-204385.5In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-24 CVE-2022-204395.5In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242 CVE-2022-20448.2MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, ca CVE-2022-204405.5In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-24 CVE-2022-204417.8In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the code. This could le CVE-2022-204427.3In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API level < 23 due to a CVE-2022-204437.8In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack. This could lea