CVE-2022-20085

MEDIUM

Android - Local Privilege Escalation via Symbolic Link Following in netdiag

Title source: llm
STIX 2.1

Description

In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06308877; Issue ID: ALPS06308877.

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0012
EPSS Percentile 2.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-59
Status published
Products (2)
google/android 11.0
google/android 12.0
Published May 03, 2022
Tracked Since Feb 18, 2026