CVE-2022-20278

2022-08-1115:15:55

google_android

www.cve.org

accounts system log android-13 information disclosure

AI Score

5.9

Confidence

High

EPSS

Percentile

5.1%

JSON

In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-205130113

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-13"
      }
    ]
  }
]

References

source.android.com/security/bulletin/android-13