CVE-2022-20339

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. This could lead to local information disclosure of network topography with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-171572148

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-20345.3The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated userCVE-2022-203403.3In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing permission check. ThCVE-2022-203415.5In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local informCVE-2022-203423.3In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could lead to local informatCVE-2022-203447.0In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition. This couCVE-2022-203458.8In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote coCVE-2022-203466.5In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. TCVE-2022-203478.8In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remCVE-2022-203487.8In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permiCVE-2022-203497.8In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missingCVE-2022-20356.1A reflected cross-site scripting (XSS) vulnerability exists in the playerConfUrl parameter in the /defaultui/player/modern.html file for SCOCVE-2022-203505.5In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the
CVE-2022-20339: Low severity, CVSS 3.3 | Vulnix