{"id":"CVE-2022-20117","aliases":["A-217475903","EUVD-2022-25377","GHSA-j4mf-rfr2-466f","PUB-A-217475903"],"status":"published","title":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to...","description":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00078,"percentile":0.00125,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327"],"published":"2022-05-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["Pixel-family specific:2022-05-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"Pixel-family specific:0"},{"fixed":"Pixel-family specific:2022-05-05"}]}],"versions":["Pixel-family specific"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2022-05-01","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20117"},{"url":"https://github.com/advisories/GHSA-j4mf-rfr2-466f"},{"url":"https://source.android.com/security/bulletin/2022-05-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-20117","description":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A","status":"published","published":"2022-05-10T20:15:58Z","modified":"2024-08-03T02:02:30.883Z","updated_at":"2026-11-02T14:34:24.971323Z"}],"euvd":[{"id":"EUVD-2022-25377","description":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A","status":"published","published":"2022-05-10T20:15:58Z","modified":"2024-08-03T02:02:30Z","updated_at":"2026-11-03T03:25:55.962721Z"}],"ghsa":[{"id":"GHSA-j4mf-rfr2-466f","title":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to...","description":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A","status":"published","published":"2022-05-11T00:01:03Z","modified":"2023-02-01T05:02:08Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:49:51.128354Z"}],"nvd":[{"id":"CVE-2022-20117","description":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-217475903References: N/A","status":"published","published":"2022-05-10T21:15:09.007Z","modified":"2026-06-17T04:23:41.94Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:07:19.51203Z"}],"osv":[{"id":"PUB-A-217475903","description":"In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2022-05-01T00:00:00Z","modified":"2026-11-09T16:40:10.884737887Z","updated_at":"2026-11-10T17:35:08.408541Z"}]}}