CVE-2022-20559

In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-219739967

• CWE-203
• CWE-203

• https://source.android.com/security/bulletin/pixel/2022-12-01Patch, Vendor Advisory
• https://source.android.com/security/bulletin/pixel/2022-12-01Patch, Vendor Advisory

Published

Dec 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20553In onCreate of LogAccessDialogActivity.java, there is a poss…6.5
• CVE-2022-20554In removeEventHubDevice of InputDevice.cpp, there is a possi…6.7
• CVE-2022-20555In ufdt_get_node_by_path_len of ufdt_convert.c, there is a p…4.4
• CVE-2022-20556In launchConfigNewNetworkFragment of NetworkProviderSettings…3.3
• CVE-2022-20557In MessageQueueBase of MessageQueueBase.h, there is a possib…6.7
• CVE-2022-20558In registerReceivers of DeviceCapabilityListener.java, there…3.3
• CVE-2022-2056Divide By Zero error in tiffcrop in libtiff 4.4.0 allows att…6.5
• CVE-2022-20560Product: AndroidVersions: Android kernelAndroid ID: A-212623…7.5
• CVE-2022-20561In TBD of aud_hal_tunnel.c, there is a possible memory corru…7.8
• CVE-2022-20562In various functions of ap_input_processor.c, there is a pos…3.3
• CVE-2022-20563In TBD of ufdt_convert, there is a possible out of bounds re…6.7
• CVE-2022-20564In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a …6.7