PT-2022-14254
CVE-2022-20007
·
تاريخ النشر
2022-05-01
·
تاريخ التحديث
2022-05-16
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Android versions Android-10 through Android-12L
Description
A race condition in the
startActivityForAttachedApplicationIfNeeded function of RootWindowContainer.java allows an app to overlay another app that believes it is still in the foreground when it is not. This could lead to local escalation of privilege with no additional execution privileges needed, requiring user interaction for exploitation.Recommendations
For Android versions Android-10 through Android-12L, update to a version that includes the fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾