Vulnerabilities > CVE-2022-20529 - Missing Authorization vulnerability in Google Android 13.0
Attack vector
PHYSICAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege in wifi settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231583603
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 |