CVE-2022-20472

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239210579

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
n/aAndroidAndroid-10 Android-11 Android-12 Android-12L Android-13

References

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-204739.8In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote CVE-2022-204747.8In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This cCVE-2022-204757.8In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused depCVE-2022-204765.5In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustiCVE-2022-204777.8In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic CVE-2022-204787.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-204797.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-20487.5In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up noCVE-2022-204807.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-204815.5In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local informatioCVE-2022-204825.5In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and require factory reset due CVE-2022-204837.5In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer ov
CVE-2022-20472: Critical severity, CVSS 9.8 | Vulnix