CyberRota Analysis
AI analysis pending.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
exploit arbitrary code execution code execution
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2022-20452
Severity
HIGH
CVSS
7.8
EPSS
0.36%
Android Java
Original NVD Description
In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240138318