Skip to content
Sign in
6.2 Medium

CVE-2022-20350 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant…

Description

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228178437

Affected products and versions

Product Affected versions Fixed in
Android Versions not published

Other CVEs of Android

The 2441 CVEs of Android →
CVE-2023-21155 In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check Not rated CVE-2023-21226 In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds… Not rated CVE-2023-21201 In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check Not rated CVE-2023-21190 In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without… Not rated
Track this CVE