cve.bz

CVE-2022-20456

7.8 highEPSS 0.2%

High (7.8) in google android. EPSS 0.2% chance of exploitation in the next 30 days.

In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242703780

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWEs
CWE-770, CWE-276
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON