{"id":"ASB-A-206986392","details":"In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.","aliases":["A-206986392","CVE-2022-20137"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L-next:0"},{"fixed":"12L-next:2022-06-01"}]}],"versions":["12L-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47"],"severity":"High","spl":"2022-06-01","types":["EoP"],"vanir_signatures":[{"digest":{"function_hash":"13568636868366417716505357970160124569","length":1086},"id":"ASB-A-206986392-0ce88424","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java","function":"onCreateContextMenu"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"function":"onCreate","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"deprecated":false,"digest":{"length":192,"function_hash":"149372703456323609643363438701781236245"},"id":"ASB-A-206986392-95d1e200"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["72759330091169440706046299701103761556","96745820388189669581616755126377647186","87865666946076029588051594736439032788","252737809419705322495725229434262881927","218762167545415410902944374971461231256","314399651843304487252640965609731820434","280839746220081182866774948504646794383","1350036305887135929253374320924872697","81064503419041583093436632649403130594","272881835193739693634818982597145849953","191515802057777236387234656598664993193","311905520897081873321127502738113647701","119868343521868856342776231674499868491","47841180790468053334702365566593551732","248212345293161860846198535629283111794","92469899287092226165029592769166299941","339044967354515491866951749538680764724","15066870438961620317005223572938971177","269506549092011647355447078539577161646","237170114034437929832988191374660292602","247333107914320633484037729534948217010","164371200764742891788193256042550722578","154688404653072709596492445340016998985","179922275559886036550135941934979487273","92173793544998893813557468613625537171","314326959141032461913909579284862231984"]},"id":"ASB-A-206986392-cf420be2","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"file":"src/com/android/settings/wifi/details/WifiNetworkDetailsFragment.java","function":"onCreate"},"deprecated":false,"digest":{"length":96,"function_hash":"175600120082974199279319441403192683972"},"id":"ASB-A-206986392-d5c05bee","signature_type":"Function"},{"digest":{"line_hashes":["182874484485167770165689928578842610386","151184599949721964488306171914746781688","129207148259000092113158940051063161974","27119134391225462237622198997270335766"],"threshold":0.9},"id":"ASB-A-206986392-db4859dd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"file":"src/com/android/settings/wifi/details/WifiNetworkDetailsFragment.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-206986392.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-06-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0"],"severity":"High","spl":"2022-06-01","types":["EoP"],"vanir_signatures":[{"target":{"function":"onCreate","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"deprecated":false,"digest":{"function_hash":"149372703456323609643363438701781236245","length":192},"id":"ASB-A-206986392-25f7a261","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java"},"deprecated":false,"digest":{"line_hashes":["72759330091169440706046299701103761556","96745820388189669581616755126377647186","87865666946076029588051594736439032788","252737809419705322495725229434262881927","218762167545415410902944374971461231256","314399651843304487252640965609731820434","280839746220081182866774948504646794383","1350036305887135929253374320924872697","81064503419041583093436632649403130594","272881835193739693634818982597145849953","191515802057777236387234656598664993193","311905520897081873321127502738113647701","119868343521868856342776231674499868491","47841180790468053334702365566593551732","248212345293161860846198535629283111794","26115151735908413201975903865781592943","216161841127094821162754238231683176768","281305200577974881795317529401554303009","232598706504478546211884083260189565560","237170114034437929832988191374660292602","247333107914320633484037729534948217010","164371200764742891788193256042550722578","154688404653072709596492445340016998985","179922275559886036550135941934979487273","92173793544998893813557468613625537171","314326959141032461913909579284862231984"],"threshold":0.9},"id":"ASB-A-206986392-8499b819","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"74675235477422270519684013993988859645","length":1041},"id":"ASB-A-206986392-a35002bc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","target":{"function":"onCreateContextMenu","file":"src/com/android/settings/network/NetworkProviderSettings.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-206986392.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","spl":"2022-06-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","target":{"function":"onCreateContextMenu","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"deprecated":false,"digest":{"function_hash":"74675235477422270519684013993988859645","length":1041},"id":"ASB-A-206986392-739dd3de","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java"},"deprecated":false,"digest":{"line_hashes":["72759330091169440706046299701103761556","96745820388189669581616755126377647186","87865666946076029588051594736439032788","252737809419705322495725229434262881927","218762167545415410902944374971461231256","314399651843304487252640965609731820434","280839746220081182866774948504646794383","1350036305887135929253374320924872697","81064503419041583093436632649403130594","272881835193739693634818982597145849953","191515802057777236387234656598664993193","311905520897081873321127502738113647701","119868343521868856342776231674499868491","47841180790468053334702365566593551732","248212345293161860846198535629283111794","26115151735908413201975903865781592943","216161841127094821162754238231683176768","281305200577974881795317529401554303009","232598706504478546211884083260189565560","237170114034437929832988191374660292602","247333107914320633484037729534948217010","164371200764742891788193256042550722578","154688404653072709596492445340016998985","179922275559886036550135941934979487273","92173793544998893813557468613625537171","314326959141032461913909579284862231984"],"threshold":0.9},"id":"ASB-A-206986392-d6ee3214"},{"id":"ASB-A-206986392-e87ec892","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java","function":"onCreate"},"deprecated":false,"digest":{"function_hash":"149372703456323609643363438701781236245","length":192}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-206986392.json"}}],"schema_version":"1.9.0"}