CVE-2022-20324

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-187042120

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-203

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-203257.8In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional ex CVE-2022-203265.5In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disc CVE-2022-203272.8In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check. This could lead CVE-2022-203283.3In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to lo CVE-2022-203297.8In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead to local escalation o CVE-2022-203303.5In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing permission check. T CVE-2022-203317.8In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack. This could lead CVE-2022-203325.5In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat CVE-2022-203336.5In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional executio CVE-2022-203346.5In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no ad CVE-2022-203353.3In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check CVE-2022-203363.3In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information di