Vulnerability Details : CVE-2022-20312
In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information disclosure without additional execution privileges needed. User interaction is not needed forexploitationProduct: AndroidVersions: Android-13Android ID: A-192244925
Published
2022-08-12 15:15:12
Updated
2022-08-15 22:32:50
Vulnerability category: Information leak
Products affected by CVE-2022-20312
- cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-20312
0.01%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 1 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-20312
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2022-20312
-
During installation, installed file permissions are set to allow anyone to modify those files.Assigned by: nvd@nist.gov (Primary)
References for CVE-2022-20312
-
https://source.android.com/security/bulletin/android-13
Android 13 Security Release Notes | Android Open Source ProjectVendor Advisory
Jump to