CVE-2022-20320

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-187956596

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-203

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-203213.3In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission che CVE-2022-203225.5In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information CVE-2022-203235.5In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local informati CVE-2022-203245.5In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information d CVE-2022-203257.8In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional ex CVE-2022-203265.5In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disc CVE-2022-203272.8In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check. This could lead CVE-2022-203283.3In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to lo CVE-2022-203297.8In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead to local escalation o CVE-2022-203303.5In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing permission check. T CVE-2022-203317.8In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack. This could lead CVE-2022-203325.5In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat