Information disclosure in Google Android - CVE-2022-20498

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU69990

Information disclosure in Google Android - CVE-2022-20498

Published: December 7, 2022 / Updated: December 7, 2022


Vulnerability identifier: #VU69990
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-20498
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker to gain access to potentially sensitive information.

The vulnerability exists due to unspecified error within the Bluetooth component. An attacker with physical proximity to device can gain unauthorized access to sensitive information.


Affected software

Google Android
Pixel

How to mitigate CVE-2022-20498

Install updates from vendor's website.

Google Android - addressed in versions 10 2022-12-01, 11 2022-12-01, 12L 2022-12-01, 12 2022-12-01, 13 2022-12-01
Pixel - update to 2022-12-05

External References

Related Security Bulletins