๐Ÿ” CVE Alert

CVE-2022-20394

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when another app is showing an IME due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-204906124

Vendor n/a
Product android
Ecosystems
Industries
TechnologyMobile
Published Oct 11, 2022
Last Updated Aug 3, 2024
Stay Ahead of the Next One

Get instant alerts for n/a android

Be the first to know when new unknown vulnerabilities affecting n/a android are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

n/a / Android
Android-10 Android-11 Android-12 Android-12L

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
source.android.com: https://source.android.com/security/bulletin/2022-10-01