CVE-2022-20538

In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-235601770

• CWE-203
• CWE-203

• https://source.android.com/security/bulletin/pixel/2022-12-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2022-12-01Patch, Vendor Advisory

Published

Dec 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20531In Telecom, there is a possible way to determine whether an …5.5
• CVE-2022-20532In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a…9.8
• CVE-2022-20533In getSlice of WifiSlice.java, there is a possible way to co…3.3
• CVE-2022-20535In registerLocalOnlyHotspotSoftApCallback of WifiManager.jav…3.3
• CVE-2022-20536In registerBroadcastReceiver of RcsService.java, there is a …3.3
• CVE-2022-20537In createDialog of WifiScanModeActivity.java, there is a pos…3.3
• CVE-2022-20539In parameterToHal of Effect.cpp, there is a possible out of …6.7
• CVE-2022-2054Code Injection in GitHub repository nuitka/nuitka prior to 0…7.8
• CVE-2022-20540In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is po…7.8
• CVE-2022-20541In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible …4.2
• CVE-2022-20542In parseParamsBlob of types.cpp, there is a possible out of …7.8
• CVE-2022-20543In multiple locations, there is a possible display crash loo…2.3