CVE-2022-20399

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local information disclosure of network data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-219808546References: Upstream kernel

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Sep 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-20405.4The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element URL, which could allow users with a role as low as Contrib CVE-2022-204009.8In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution CVE-2022-204017.5In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lea CVE-2022-204029.8Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A CVE-2022-204039.8Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A CVE-2022-204047.5Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A CVE-2022-204059.8Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A CVE-2022-204067.5Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A CVE-2022-204077.5Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A CVE-2022-204087.5Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A CVE-2022-204096.7In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of CVE-2022-20415.4The Brizy WordPress plugin before 2.4.2 does not sanitise and escape some element content, which could allow users with a role as low as Con