CVE-2022-20530

2022-12-1600:00:00

google_android

www.cve.org

permission bypass

strings.xml

remote disclosure

call logs

android-13

cve-2022-20530

user interaction

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

35.6%

JSON

In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information disclosure of call logs with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231585645

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-13",
        "status": "affected"
      }
    ]
  }
]

References

source.android.com/security/bulletin/pixel/2022-12-01