CVE-2022-20413
MEDIUMAndroid - Local Information Disclosure via Audio Recording Logic Error
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2022-20413. PoCs published by pazhanivel07.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2022-20413, targeting a vulnerability in the Android camera framework. The exploit demonstrates how an attacker could potentially exploit the vulnerability to gain unauthorized access or execute arbitrary code.
Description
In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-235850634
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2022-20413, targeting a vulnerability in the Android camera framework. The exploit demonstrates how an attacker could potentially exploit the vulnerability to gain unauthorized access or execute arbitrary code.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N