CVE-2022-20458

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotification.getKey() could contain sensitive information. However, CarNotificationListener.java, it prints out the StatusBarNotification.getKey() directly in logs, which could contain user's account name (i.e. PII), in Android "user" build.Product: AndroidVersions: Android-12LAndroid ID: A-205567776

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published: Jan 26, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-204596.7In (TBD) of (TBD), there is a possible way to redirect code execution due to improper input validation. This could lead to local escalation CVE-2022-20464.9The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but CVE-2022-204606.7In (TBD) mprot_unmap? of (TBD), there is a possible way to corrupt the memory mapping due to improper input validation. This could lead to l CVE-2022-204617.8In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This CVE-2022-204627.8In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to l CVE-2022-204645.5In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. CVE-2022-204654.6In dismiss and related functions of KeyguardHostViewController.java and related files, there is a possible lockscreen bypass due to a logic CVE-2022-204665.5In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary d CVE-2022-204675.5In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. This could lead to loc CVE-2022-204686.5In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inform CVE-2022-204698.8In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local es CVE-2022-20472.7In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment o