CVE-2022-20128
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
What each source reports
CVE List No score
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
CVE-2022-20128- Updated
- 2026-11-02
EUVDEUVD-2022-25388 No score
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
EUVD-2022-25388- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qj67-7hp5-84p2 No score
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
GHSA-qj67-7hp5-84p2- Updated
- 2026-11-02
NVD No score
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
CVE-2022-20128- Updated
- 2026-11-02
OSVASB-A-209438553 No score
In finishLsImpl of file_sync_client.cpp, there is a possible way to access host's files due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
ASB-A-209438553- Updated
- 2026-11-06
OSV No score
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
CVE-2022-20128- Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-20128 No score
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
UBUNTU-CVE-2022-20128- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
platform/packages/modules/adbAndroid |
12L-next:0 up to 12L-next:2022-06-01, plus listed versions 12L-next |
12L-next:2022-06-01 |
platform/system/coreAndroid |
10:0 up to 10:2022-06-01, plus listed versions 10 |
10:2022-06-01 |
platform/system/coreAndroid |
11:0 up to 11:2022-06-01, plus listed versions 11 |
11:2022-06-01 |
platform/packages/modules/adbAndroid |
12:0 up to 12:2022-06-01, plus listed versions 12 |
12:2022-06-01 |
platform/packages/modules/adbAndroid |
12L:0 up to 12L:2022-06-01, plus listed versions 12L |
12L:2022-06-01 |
android-platform-toolsUbuntu:22.04:LTS |
All versions, plus listed versions 29.0.6-329.0.6-429.0.6-4ubuntu1 |
None known |
android-platform-toolsUbuntu:24.04:LTS |
All versions, plus listed versions 33.0.3-234.0.4-1build234.0.4-1build3 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | irsl/CVE-2022-20128 | 2022-09-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-20128 has been rejected by its source and should not be treated as a live vulnerability, published June 1, 2022. Public exploit code exists. Fixed in platform/packages/modules/adb 12L-next:2022-06-01.