CVE-2022-20214

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Weakness enumeration

CWE-1021

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-202155.5In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. This could lead to locCVE-2022-202169.8android exported is used to set third-party app access permissions, and the default value of intent-filter is true. com.sprd.firewall has seCVE-2022-202176.5There is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this issue to delete Fdn contact.Product: AndroidCVE-2022-202187.8In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic error in the code. ThisCVE-2022-202195.5In multiple functions of StorageManagerService.java and UserManagerService.java, there is a possible way to leave user's directories unencryCVE-2022-20225.4Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7.CVE-2022-202207.8In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalatioCVE-2022-202216.5In avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to improper input validation. This could lead toCVE-2022-202229.8In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execCVE-2022-202237.8In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due toCVE-2022-202247.5In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote iCVE-2022-202255.5In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission ch
CVE-2022-20214: Medium severity, CVSS 4.7 | Vulnix