CVE-2022-20272

In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to local information disclosure with User privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-207672568

• CWE-276

• https://source.android.com/security/bulletin/android-13Vendor Advisory
• https://source.android.com/security/bulletin/android-13Vendor Advisory

Published

Aug 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20267In bluetooth, there is a possible way to enable or disable b…3.3
• CVE-2022-20268In RestrictionsManager, there is a possible way to send a br…7.8
• CVE-2022-20269In Bluetooth, there is a possible out of bounds write due to…6.8
• CVE-2022-2027Improper Neutralization of Formula Elements in a CSV File in…8
• CVE-2022-20270In Content, there is a possible way to learn gmail account n…5.5
• CVE-2022-20271In PermissionController, there is a possible way to grant so…7.8
• CVE-2022-20273In Bluetooth, there is a possible out of bounds read due to …6.5
• CVE-2022-20274In Keyguard, there is a missing permission check. This could…7.8
• CVE-2022-20275In DevicePolicyManager, there is a possible way to determine…5.5
• CVE-2022-20276In DevicePolicyManager, there is a possible way to determine…5.5
• CVE-2022-20277In DevicePolicyManager, there is a possible way to determine…5.5
• CVE-2022-20278In Accounts, there is a possible way to write sensitive info…5.5