CVE-2022-20342

In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-143534321

• CWE-1188

• https://source.android.com/security/bulletin/android-13Vendor Advisory
• https://source.android.com/security/bulletin/android-13Vendor Advisory

Published

Aug 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20336In Settings, there is a possible installed application discl…3.3
• CVE-2022-20338In HierarchicalUri.readFrom of Uri.java, there is a possible…3.3
• CVE-2022-20339In Android, there is a possible access of network neighbor t…3.3
• CVE-2022-2034The Sensei LMS WordPress plugin before 4.5.0 does not have p…5.3
• CVE-2022-20340In SELinux policy, there is a possible way of inferring whic…3.3
• CVE-2022-20341In ConnectivityService, there is a possible bypass of networ…5.5
• CVE-2022-20344In stealReceiveChannel of EventThread.cpp, there is a possib…7
• CVE-2022-20345In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible…8.8
• CVE-2022-20346In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor…6.5
• CVE-2022-20347In onAttach of ConnectedDeviceDashboardFragment.java, there …8.8
• CVE-2022-20348In updateState of LocationServicesWifiScanningPreferenceCont…7.8
• CVE-2022-20349In WifiScanningPreferenceController and BluetoothScanningPre…7.8