CVE-2022-20318

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194694069

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-203

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-203197.8In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escala CVE-2022-20324.8In Pandora FMS v7.0NG.761 and below, in the file manager section, the dirname parameter is vulnerable to a Stored Cross Site-Scripting. This CVE-2022-203203.3In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa CVE-2022-203213.3In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission che CVE-2022-203225.5In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information CVE-2022-203235.5In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local informati CVE-2022-203245.5In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information d CVE-2022-203257.8In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional ex CVE-2022-203265.5In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disc CVE-2022-203272.8In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check. This could lead CVE-2022-203283.3In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to lo CVE-2022-203297.8In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead to local escalation o