CoreCVE
Back

HIGH

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion

Published Dec 13, 2022

Description

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242702851

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner google_android
Published Dec 13, 2022
Updated Apr 22, 2025
Reserved Oct 14, 2021
Link CVE-2022-20484
CISA Vulnrichment
Updated Apr 22, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-20484
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-20484
ENISA EUVD
Assigner google_android
Published Dec 13, 2022
Updated Apr 22, 2025
Exploited since n/a
Link EUVD-2022-25744
EUVD-2022-25744