CVE-2022-20314

MEDIUM

Android 13 - Local Privilege Escalation via KeyChain Spoofed Activity Request

Title source: llm
STIX 2.1

Description

In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-191876118

References (1)

Core 1
Core References

Scores

CVSS v3 6.7
EPSS 0.0010
EPSS Percentile 1.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (1)
google/android 13.0
Published Aug 12, 2022
Tracked Since Feb 18, 2026