CVE-2022-20066

MEDIUM

Android - Local Information Disclosure via Incorrect Error Handling in ATF

Title source: llm
STIX 2.1

Description

In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171729; Issue ID: ALPS06171729.

References (1)

Core 1
Core References

Scores

CVSS v3 4.4
EPSS 0.0012
EPSS Percentile 2.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-755
Status published
Products (2)
google/android 11.0
google/android 12.0
Published Apr 11, 2022
Tracked Since Feb 18, 2026