CVE-2022-20456

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703780

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-770CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-204575.5In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validatiCVE-2022-204585.5The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotifiCVE-2022-204596.7In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead to local escalation CVE-2022-20464.9The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, butCVE-2022-204606.7In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to lCVE-2022-204617.8In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This CVE-2022-204627.8In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to lCVE-2022-204645.5In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. CVE-2022-204654.6In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic CVE-2022-204665.5In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary dCVE-2022-204675.5In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. This could lead to locCVE-2022-204686.5In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inform
CVE-2022-20456: High severity, CVSS 7.8 | Vulnix