CVE-2022-27836: Google Android

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access.

Affected products

• Google Android: version 12.0 only

Published 2022-04-11. Last modified 2026-06-17.