VULNERABILITY INTELLIGENCE

CVE-2022-20492

CVSS score7.8 HIGH

EPSS probability0.27%

CISA KEVNot currently listed

Published2023-01-26

Last modified2026-06-17

Description

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242704043