CVE-2022-20332

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-180019130

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-203336.5In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional executio CVE-2022-203346.5In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no ad CVE-2022-203353.3In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check CVE-2022-203363.3In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information di CVE-2022-203383.3In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This coul CVE-2022-203393.3In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. This could lead to l CVE-2022-20345.3The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated user CVE-2022-203403.3In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing permission check. Th CVE-2022-203415.5In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local inform CVE-2022-203423.3In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could lead to local informat CVE-2022-203447.0In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This cou CVE-2022-203458.8In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote co