CVE-2022-20134

CVE-2022-20134 is a high-severity vulnerability affecting Android versions 10 through 12L, stemming from improper input validation in the CallSubjectDialog.java component. This flaw allows a local attacker to trick a user into calling an incorrect phone number, potentially leading to local escalation of privilege without requiring user interaction for exploitation. The vulnerability carries a CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability, with low attack complexity and no additional execution privileges needed. While no public exploits or Metasploit modules are available, and there's minimal community discussion or media coverage, its high severity and ease of exploitation warrant attention.