CVE-2022-20398 PUBLISHED

In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-221859734

EPSS 0.01% · 1.7th percentile

Risk Scores

EPSS Score
0.01%
1.7th percentile

Affected Products

VendorProductVersions
n/aAndroidAndroid-13
googleandroid13.0

Timeline

References

Open in Interactive Console →