CVE-2022-20006: Lock Screen Bypass in Android platform/frameworks/base
Summary
CVE-2022-20006: In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. Affects platform/frameworks/base across 4 version ranges.
>= 10:0, < 10:2022-06-01
>= 11:0, < 11:2022-06-01
>= 12:0, < 12:2022-06-01
>= 12L:0, < 12L:2022-06-01
Fixed in 10:2022-06-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Android platform/frameworks/base package is a fundamental component of the Android operating system. It provides core functionalities and services for the system, including the lock screen feature. The lock screen is designed to secure the device and prevent unauthorized access. However, a vulnerability has been identified in several functions of KeyguardServiceWrapper.java and related files, which allows for a brief view of hidden contents under the lock screen due to a race condition. This vulnerability could potentially lead to local privilege escalation if a Guest user is enabled, without requiring additional execution privileges. Exploitation of this vulnerability does not require user interaction.
Vulnerability Detail
The vulnerability (CVE-2022-20006) in the Android platform/frameworks/base package allows an attacker to briefly view hidden contents under the lock screen. This is possible due to a race condition in certain functions of KeyguardServiceWrapper.java and related files. By exploiting this vulnerability, an attacker with access to a Guest user account can escalate their privileges locally. This means they can gain unauthorized access to sensitive information or perform actions that should be restricted to higher privileged users. The vulnerability affects Android versions 10, 11, 12, and 12L.
How To Fix
Minimum fixed version
10:2022-06-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability (CVE-2022-20006) in the Android platform/frameworks/base package allows for a brief view of hidden contents under the lock screen, potentially leading to local privilege escalation. It is recommended to apply the provided fix from the Android Open Source Project (AOSP) and update the affected Android devices to a version that includes this fix. Avoiding the enabling of Guest user accounts can also help mitigate the risk. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
The vulnerability allows an attacker with a Guest user account to briefly view hidden contents under the lock screen and potentially escalate their privileges locally.
No, exploitation of this vulnerability does not require user interaction.
Android versions 10, 11, 12, and 12L are affected by this vulnerability.
To fix this vulnerability, update the affected Android devices to a version that includes the provided fix from the Android Open Source Project (AOSP).
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
