CVE-2022-20271

In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI

published August 11, 2022

CVSS
—
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-207672635

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00115 · 1.5th percentile
Published
2022-08-11T15:14Z
EPSS history
Timeline
  • 11 AUG 15:14Z
    In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI
    cvelistv5