{"id":"PUB-A-235601169", "published":"2022-12-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2022-20537", "A-235601169"], "details":"In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive settings due to a missing permission check. This could lead to local escalation of privilege from the Guest user with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2022-12-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/8b1e21f92998c85e728a502fe52be23a7e3696ee"], "severity":"Moderate", "spl":"2022-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"34728420961191027874925828834925442004", "length":150}, "id":"PUB-A-235601169-06979785", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/8b1e21f92998c85e728a502fe52be23a7e3696ee", "target":{"file":"src/com/android/settings/wifi/WifiScanModeActivity.java", "function":"createDialog"}}, {"deprecated":false, "digest":{"line_hashes":["49495261199254921952323577008448206907", "78016449987601987235791248165404880181", "304748368377060064966815848641393205699", "268257495089161562332630312097263370617", "20084663032027974877644383978751334526", "24244162159008669250711786970111926944", "128902167704304713786662264768397034737", "203742218110522710565404928247286224076", "89376418065807262447808223030731093779", "192783271548435201179492028009613489935", "205590085519228782754809691205375309939", "64950636608198087317492626991849203076", "309311672629146260666418030897801897204", "275061548306180913522711608089488951383", "88385865971706246233390319659732845112", "67591367833042427268291829365403322585", "130811660742352081567886956322758940129", "337804296410846834241371898750323520206"], "threshold":0.9}, "id":"PUB-A-235601169-f86a81bb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/8b1e21f92998c85e728a502fe52be23a7e3696ee", "target":{"file":"src/com/android/settings/wifi/WifiScanModeActivity.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-12-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Settings/+/8b1e21f92998c85e728a502fe52be23a7e3696ee"}]}