CVE-2022-20497

In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifications on the lockscreen due to an incorrect state transition. This could lead to local information disclosure with physical access required and an app that runs above the lockscreen, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-246301979

• CWE-200

• https://source.android.com/security/bulletin/2022-12-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2022-12-01Patch, Vendor Advisory

Published

Dec 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20491In NotificationChannel of NotificationChannel.java, there is…7.8
• CVE-2022-20492In many functions of AutomaticZenRule.java, there is a possi…7.8
• CVE-2022-20493In Condition of Condition.java, there is a possible way to g…7.8
• CVE-2022-20494In AutomaticZenRule of AutomaticZenRule.java, there is a pos…5.5
• CVE-2022-20495In getEnabledAccessibilityServiceList of AccessibilityManage…7.8
• CVE-2022-20496In setDataSource of initMediaExtractor.cpp, there is a possi…5.5
• CVE-2022-20498In fdt_path_offset_namelen of fdt_ro.c, there is a possible …4.4
• CVE-2022-20499In validateForCommonR1andR2 of PasspointConfiguration.java, …5.5
• CVE-2022-2050The WP-Paginate WordPress plugin before 2.1.9 does not escap…4.8
• CVE-2022-20500In loadFromXml of ShortcutPackage.java, there is a possible …5.5
• CVE-2022-20501In onCreate of EnableAccountPreferenceActivity.java, there i…7.3
• CVE-2022-20502In GetResolvedMethod of entrypoint_utils-inl.h, there is a p…5.5