VULNERABILITY INTELLIGENCE
CVE-2022-20304
CVSS score5.5 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2022-08-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919
Weakness classification
- nvd@nist.gov: CWE-203
Primary references
- security@android.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory