In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the wrong app

ANDROID

20-10-2025 21:38

CVE-2022-20350 Vulnerabilidad documentada

Sin puntuación

Tags

#android

#exploit

#product

#java

#form

#improper

#privilege

#execution

#access

Descripción

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim grant notification access wrong app due improper input validation. This could lead local information disclosure with User execution privileges needed. interaction not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228178437

https://source.android.com/security/bulletin/2022-08-01

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2022-20350

Resultados similares

Coincidentes en almenos en 50% de los tags

27-10-2025 CVE-2025-61482
Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 ...
Ver información

27-10-2025 CVE-2025-12080
On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, ...
Ver información