CVE-2022-20117

MEDIUM

Android - Local Information Disclosure via Improper Cryptographic Implementation

Title source: llm
STIX 2.1

Description

In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0008
EPSS Percentile 0.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-327
Status published
Products (1)
google/android
Published May 10, 2022
Tracked Since Feb 18, 2026