Vulnerabilities > CVE-2022-20195 - Deserialization of Untrusted Data vulnerability in Google Android 12.1

047910
CVSS 1.9 - LOW
Attack vector
LOCAL
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL

Summary

In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-213172664

Vulnerable Configurations

Part Description Count
OS
Google
1

Common Weakness Enumeration (CWE)