CVE-2022-20304

In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919

• CWE-203

• https://source.android.com/security/bulletin/android-13Vendor Advisory
• https://source.android.com/security/bulletin/android-13Vendor Advisory

Published

Aug 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20299In ContentService, there is a possible way to check if the g…5.5
• CVE-2022-2030A directory traversal vulnerability caused by specific chara…6.5
• CVE-2022-20300In Content, there is a possible way to check if the given ac…5.5
• CVE-2022-20301In Content, there is a possible way to check if an account e…5.5
• CVE-2022-20302In Settings, there is a possible way to bypass factory reset…7.6
• CVE-2022-20303In ContentService, there is a possible way to determine if a…5.5
• CVE-2022-20305In ContentService, there is a possible disclosure of availab…3.3
• CVE-2022-20306In Camera Provider HAL, there is a possible memory corruptio…6.7
• CVE-2022-20307In AlarmManagerService, there is a possible way to determine…3.3
• CVE-2022-20308In hostapd, there is a possible insecure configuration due t…7.5
• CVE-2022-20309In PackageInstaller, there is a possible way to determine wh…3.3
• CVE-2022-2031A flaw was found in Samba. The security vulnerability occurs…8.8