{"metadata": {"vulnerability": "CVE-2022-20338", "count": 30, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 20}}, "data": [{"timestamp": "2021-10-14T00:00:00Z", "date_only": false, "value": "2021-10-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-20338", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-08-11T00:00:00Z", "date_only": false, "value": "2022-08-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-20338", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-08-12T15:15:00Z", "date_only": false, "value": "2022-08-12T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MWFH-4Q4P-RW3P", "record": "GHSA-MWFH-4Q4P-RW3P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-08-12T15:15:00Z", "date_only": false, "value": "2022-08-12T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-20338", "record": "GSD-2022-20338", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-08-12T15:15:12.997Z", "date_only": false, "value": "2022-08-12T15:15:12.997", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20338", "record": "FKIE_CVE-2022-20338", "field": "published"}, {"timestamp": "2022-08-12T18:33:39Z", "date_only": false, "value": "2022-08-12T18:33:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/48036", "record": "CVE-2022-20338", "field": "creation_timestamp", "uuid": "c4efa345-e721-4c54-9cf2-995ad8dc035d", "content": "\u203c CVE-2022-20338 \u203c\n\nIn Core Utilities, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege, preventing processes from validating URIs correctly, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-171966843\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/48036"}, {"timestamp": "2022-08-13T00:00:45Z", "date_only": false, "value": "2022-08-13T00:00:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MWFH-4Q4P-RW3P", "record": "GHSA-MWFH-4Q4P-RW3P", "field": "published"}, {"timestamp": "2022-08-17T00:00:33Z", "date_only": false, "value": "2022-08-17T00:00:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MWFH-4Q4P-RW3P", "record": "GHSA-MWFH-4Q4P-RW3P", "field": "modified"}, {"timestamp": "2023-05-01T22:00:00Z", "date_only": false, "value": "2023-05-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1101", "record": "WID-SEC-W-2023-1101", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-05-01T22:00:00Z", "date_only": false, "value": "2023-05-01T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1101", "record": "WID-SEC-W-2023-1101", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-05-01T22:00:00Z", "date_only": false, "value": "2023-05-01T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1101", "record": "WID-SEC-W-2023-1101", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-05-02T00:00:00Z", "date_only": false, "value": "2023-05-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0349", "record": "CERTFR-2023-AVI-0349", "field": "revisions.0.revision_date"}, {"timestamp": "2023-05-15T00:00:00Z", "date_only": false, "value": "2023-05-15T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / google_android", "record": "CVE-2022-20338", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-15T22:15:00Z", "date_only": false, "value": "2023-05-15T22:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-20338", "record": "GSD-2022-20338", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-22T22:00:00Z", "date_only": false, "value": "2023-05-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1101", "record": "WID-SEC-W-2023-1101", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-06-01T22:00:00Z", "date_only": false, "value": "2023-06-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1101", "record": "WID-SEC-W-2023-1101", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-09-17T22:00:00Z", "date_only": false, "value": "2023-09-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1101", "record": "WID-SEC-W-2023-1101", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-09-17T22:00:00Z", "date_only": false, "value": "2023-09-17T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1101", "record": "WID-SEC-W-2023-1101", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-17T07:02:37Z", "date_only": false, "value": "2023-11-17T07:02:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/227", "record": "CVE-2022-20338", "field": "creation_timestamp", "uuid": "487a7441-efdc-4bd5-bff6-40f0fa2fa9ff", "content": "#ExploitObserverAlert\n\nCVE-2022-20338\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-20338. In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to a local escalation of privilege, preventing processes from validating URIs correctly, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-171966843\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 1.4\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/227"}, {"timestamp": "2023-11-19T15:15:39Z", "date_only": false, "value": "2023-11-19T15:15:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/272", "record": "CVE-2022-20338", "field": "creation_timestamp", "uuid": "c9b3ebd9-aa08-4833-946c-ed381f8c12e6", "content": "#ExploitObserverAlert\n\nCVE-2022-20338\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2022-20338. In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to a local escalation of privilege, preventing processes from validating URIs correctly, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-171966843\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 1.4\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/272"}, {"timestamp": "2023-12-13T01:19:17.173Z", "date_only": false, "value": "2023-12-13T01:19:17.173014Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-20338", "record": "GSD-2022-20338", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T02:10:44.565Z", "date_only": false, "value": "2024-08-03T02:10:44.565Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-20338", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:50:07.756Z", "date_only": false, "value": "2024-08-15T17:50:07.756+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1101", "record": "WID-SEC-W-2023-1101", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-24T19:29:51.871Z", "date_only": false, "value": "2026-02-24T19:29:51.871143Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20338", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-02-24T19:29:51.871Z", "date_only": false, "value": "2026-02-24T19:29:51.871143Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20338", "record": "FKIE_CVE-2022-20338", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-06T19:00:30.180Z", "date_only": false, "value": "2026-03-06T19:00:30.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-20338", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-06T19:00:30.180Z", "date_only": false, "value": "2026-03-06T19:00:30.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20338", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:24:06.683Z", "date_only": false, "value": "2026-06-17T04:24:06.683", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20338", "record": "FKIE_CVE-2022-20338", "field": "lastModified"}, {"timestamp": "2026-09-18T04:00:14.004Z", "date_only": false, "value": "2026-09-18T04:00:14.004101Z", "kind": "sighting", "label": "Seen", "source": "Telegram/r1sHyk2ewM4d8sCS1fgGuaBP4leh2qVUxnL_TYfFzpvHVAw", "record": "CVE-2022-20338", "field": "creation_timestamp", "uuid": "7c0a77b0-c2e7-4809-bd34-92a1bdb0b7fc"}, {"timestamp": "2026-09-19T00:00:12.634Z", "date_only": false, "value": "2026-09-19T00:00:12.634366Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/r1sHyk2ewM4d8sCS1fgGuaBP4leh2qVUxnL_TYfFzpvHVAw", "record": "CVE-2022-20338", "field": "creation_timestamp", "uuid": "5cd3a5d3-fd96-4121-8f19-26b18754ca37"}]}