CVE-2022-20470

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-234013191

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-204715.5In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to loCVE-2022-204729.8In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote CVE-2022-204739.8In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote CVE-2022-204747.8In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This cCVE-2022-204757.8In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused depCVE-2022-204765.5In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustiCVE-2022-204777.8In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic CVE-2022-204787.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-204797.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-20487.5In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up noCVE-2022-204807.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-204815.5In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local informatio
CVE-2022-20470: High severity, CVSS 7.8 | Vulnix