Exploitation Summary
EIP tracks 3 public exploits for CVE-2022-20142. PoCs published by Satheesh575555, pazhanivel07.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2022-20142, targeting Android's Autofill framework. The code includes test cases that demonstrate the vulnerability by manipulating focus events and autofill responses.
Description
In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-216631962
Exploits (3)
This repository contains a proof-of-concept exploit for CVE-2022-20142, targeting Android's Autofill framework. The code includes test cases that demonstrate the vulnerability by manipulating focus events and autofill responses.
This repository contains functional exploit code for CVE-2022-20142, targeting Android's autofill framework. The PoC includes test cases that demonstrate the vulnerability by manipulating autofill behavior in a controlled environment.
This repository contains a proof-of-concept exploit for CVE-2022-20142, targeting Android's Autofill framework. The exploit demonstrates how an attacker could manipulate the autofill service to potentially bypass security restrictions or perform unauthorized actions.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H