CVE-2022-20457

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-243924784

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/aAndroidAndroid-13

References

Timeline

Published
Nov 8, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-204585.5The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotifiCVE-2022-204596.7In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead to local escalation CVE-2022-20464.9The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, butCVE-2022-204606.7In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to lCVE-2022-204617.8In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This CVE-2022-204627.8In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to lCVE-2022-204645.5In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. CVE-2022-204654.6In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic CVE-2022-204665.5In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary dCVE-2022-204675.5In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. This could lead to locCVE-2022-204686.5In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local informCVE-2022-204698.8In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es