CVE-2022-20312

2022-08-1115:24:24

google_android

www.cve.org

wifip2pmanager

wifi p2p mac

android-13

local information disclosure

missing permission check

AI Score

5.8

Confidence

High

EPSS

Percentile

5.1%

JSON

In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information disclosure without additional execution privileges needed. User interaction is not needed forexploitationProduct: AndroidVersions: Android-13Android ID: A-192244925

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-13"
      }
    ]
  }
]

References

source.android.com/security/bulletin/android-13