CVE-2022-20474

In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System...

7.8 HighPublic exploitFix available

CVE-2022-20474 is a high vulnerability (CVSS 7.8) in Google Android, published December 1, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in platform/frameworks/base 10:2022-12-01.

In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-240138294

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.25%Down 2.3 points since Dec 14, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2022-20474
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-276
Updated: 2026-11-02

CVE List 7.8

Record: CVE-2022-20474
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-276
Updated: 2026-11-02

EUVDEUVD-2022-25734 7.8

Record: EUVD-2022-25734
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-vvgj-jgpv-mjh7 7.8

In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System...

Record: GHSA-vvgj-jgpv-mjh7
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-276
Updated: 2026-11-02

OSVUBUNTU-CVE-2022-20474 7.8

Record: UBUNTU-CVE-2022-20474
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVASB-A-240138294 No score

Record: ASB-A-240138294
Updated: 2026-11-02

Affected products

google android

Affected packages

Affected packages
Package	Affected	Fixed
`platform/frameworks/base` Android	10:0 up to 10:2022-12-01, plus listed versions 10	10:2022-12-01
`platform/frameworks/base` Android	11:0 up to 11:2022-12-01, plus listed versions 11	11:2022-12-01
`platform/frameworks/base` Android	12:0 up to 12:2022-12-01, plus listed versions 12	12:2022-12-01
`platform/frameworks/base` Android	12L:0 up to 12L:2022-12-01, plus listed versions 12L	12L:2022-12-01
`platform/frameworks/base` Android	13:0 up to 13:2022-12-01, plus listed versions 13	13:2022-12-01
`android-platform-frameworks-base` Ubuntu:16.04:LTS	All versions, plus listed versions 21-221-2.11:6.0.0+r26-31:6.0.1+r16-1	None known
`android-platform-frameworks-base` Ubuntu:18.04:LTS	All versions, plus listed versions 1:7.0.0+r33-11:8.1.0+r23-3~18.04	None known
`android-platform-frameworks-base` Ubuntu:20.04:LTS	All versions, plus listed versions 1:8.1.0+r23-3build11:8.1.0+r23-3build2	None known
`android-platform-frameworks-base` Ubuntu:22.04:LTS	All versions, plus listed versions 1:10.0.0+r36-3	None known
`android-platform-frameworks-base` Ubuntu:24.04:LTS	All versions, plus listed versions 1:13.0.0+r66-11:14~beta1-2build21:14~beta1-2build3	None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	cxxsheng/CVE-2022-20474	2024-11-14

History

History
When	Changed	Sources
2026-11-02	created	CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub