CVE-2022-20535

In registerLocalOnlyHotspotSoftApCallback of WifiManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-233605242

• CWE-203
• CWE-203

• https://source.android.com/security/bulletin/pixel/2022-12-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2022-12-01Patch, Vendor Advisory

Published

Dec 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20529In multiple locations of WifiDialogActivity.java, there is a…2.4
• CVE-2022-2053When a POST request comes through AJP and the request exceed…7.5
• CVE-2022-20530In strings.xml, there is a possible permission bypass due to…5.3
• CVE-2022-20531In Telecom, there is a possible way to determine whether an …5.5
• CVE-2022-20532In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a…9.8
• CVE-2022-20533In getSlice of WifiSlice.java, there is a possible way to co…3.3
• CVE-2022-20536In registerBroadcastReceiver of RcsService.java, there is a …3.3
• CVE-2022-20537In createDialog of WifiScanModeActivity.java, there is a pos…3.3
• CVE-2022-20538In getSmsRoleHolder of RoleService.java, there is a possible…5.5
• CVE-2022-20539In parameterToHal of Effect.cpp, there is a possible out of …6.7
• CVE-2022-2054Code Injection in GitHub repository nuitka/nuitka prior to 0…7.8
• CVE-2022-20540In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is po…7.8