CVE-2022-20117

In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A

Score
CVSS 3.1 5.5 Medium
Status
Modified - security@android.com
Published
2022-05-10
Last modified
2024-08-03
Weaknesses
CWE-327

Affected products

References