CVE-2022-20468

2022-12-1300:00:00

google_android

www.cve.org

bluetooth

information disclosure

android-10

android-11

android-12

android-12l

android-13

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.0%

JSON

In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-228450451

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-10 Android-11 Android-12 Android-12L Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/2022-12-01