VDB

CVE-2022-20312

CVE-2022-20312 PUBLISHED CVSS 5.5 MEDIUM

In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information disclosure without additional execution privileges needed. User interaction is not needed forexploitationProduct: AndroidVersions: Android-13Android ID: A-192244925

EPSS 0.10% · 0.7th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.10%
0.7th percentile

Affected Products

VendorProductVersions
googleandroid13.0
n/aAndroidAndroid-13

Timeline

  • Aug 11, 2022 CVE Published
  • Aug 12, 2022 EPSS Score
  • Aug 16, 2022 EPSS Score
  • Sep 27, 2022 EPSS Score
  • Nov 12, 2022 EPSS Score
  • Dec 29, 2022 EPSS Score
  • Feb 13, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 31, 2023 EPSS Score
  • Jul 1, 2023 EPSS Score
  • Aug 16, 2023 EPSS Score
  • Oct 2, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›