CVE-2022-20068

MEDIUM

Android - Local Privilege Escalation via Symbolic Link Following in mobile_log_d

Title source: llm
STIX 2.1

Description

In mobile_log_d, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06308907; Issue ID: ALPS06308907.

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0012
EPSS Percentile 2.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-59
Status published
Products (3)
google/android 10.0
google/android 11.0
google/android 12.0
Published Apr 11, 2022
Tracked Since Feb 18, 2026