{"id":"ASB-A-206986392","details":"In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.","aliases":["A-206986392","CVE-2022-20137"],"modified":"2026-05-25T16:46:24.913870386Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L-next:0"},{"fixed":"12L-next:2022-06-01"}]}],"versions":["12L-next"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47"],"spl":"2022-06-01","severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"function":"onCreateContextMenu","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"id":"ASB-A-206986392-0ce88424","deprecated":false,"signature_type":"Function","signature_version":"v1","digest":{"function_hash":"13568636868366417716505357970160124569","length":1086}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"function":"onCreate","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"id":"ASB-A-206986392-95d1e200","deprecated":false,"signature_type":"Function","signature_version":"v1","digest":{"function_hash":"149372703456323609643363438701781236245","length":192}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java"},"id":"ASB-A-206986392-cf420be2","deprecated":false,"signature_type":"Line","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["72759330091169440706046299701103761556","96745820388189669581616755126377647186","87865666946076029588051594736439032788","252737809419705322495725229434262881927","218762167545415410902944374971461231256","314399651843304487252640965609731820434","280839746220081182866774948504646794383","1350036305887135929253374320924872697","81064503419041583093436632649403130594","272881835193739693634818982597145849953","191515802057777236387234656598664993193","311905520897081873321127502738113647701","119868343521868856342776231674499868491","47841180790468053334702365566593551732","248212345293161860846198535629283111794","92469899287092226165029592769166299941","339044967354515491866951749538680764724","15066870438961620317005223572938971177","269506549092011647355447078539577161646","237170114034437929832988191374660292602","247333107914320633484037729534948217010","164371200764742891788193256042550722578","154688404653072709596492445340016998985","179922275559886036550135941934979487273","92173793544998893813557468613625537171","314326959141032461913909579284862231984"]}},{"id":"ASB-A-206986392-d5c05bee","target":{"function":"onCreate","file":"src/com/android/settings/wifi/details/WifiNetworkDetailsFragment.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","deprecated":false,"signature_type":"Function","signature_version":"v1","digest":{"length":96,"function_hash":"175600120082974199279319441403192683972"}},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/876f691377ced7aa94a291b04de823ae20a36d47","target":{"file":"src/com/android/settings/wifi/details/WifiNetworkDetailsFragment.java"},"signature_type":"Line","deprecated":false,"id":"ASB-A-206986392-db4859dd","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["182874484485167770165689928578842610386","151184599949721964488306171914746781688","129207148259000092113158940051063161974","27119134391225462237622198997270335766"]}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-206986392.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-06-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0"],"spl":"2022-06-01","severity":"High","vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","target":{"function":"onCreate","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"id":"ASB-A-206986392-25f7a261","deprecated":false,"signature_type":"Function","signature_version":"v1","digest":{"length":192,"function_hash":"149372703456323609643363438701781236245"}},{"signature_type":"Line","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java"},"id":"ASB-A-206986392-8499b819","deprecated":false,"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","signature_version":"v1","digest":{"line_hashes":["72759330091169440706046299701103761556","96745820388189669581616755126377647186","87865666946076029588051594736439032788","252737809419705322495725229434262881927","218762167545415410902944374971461231256","314399651843304487252640965609731820434","280839746220081182866774948504646794383","1350036305887135929253374320924872697","81064503419041583093436632649403130594","272881835193739693634818982597145849953","191515802057777236387234656598664993193","311905520897081873321127502738113647701","119868343521868856342776231674499868491","47841180790468053334702365566593551732","248212345293161860846198535629283111794","26115151735908413201975903865781592943","216161841127094821162754238231683176768","281305200577974881795317529401554303009","232598706504478546211884083260189565560","237170114034437929832988191374660292602","247333107914320633484037729534948217010","164371200764742891788193256042550722578","154688404653072709596492445340016998985","179922275559886036550135941934979487273","92173793544998893813557468613625537171","314326959141032461913909579284862231984"],"threshold":0.9}},{"id":"ASB-A-206986392-a35002bc","target":{"function":"onCreateContextMenu","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","deprecated":false,"signature_type":"Function","signature_version":"v1","digest":{"function_hash":"74675235477422270519684013993988859645","length":1041}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-206986392.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0"],"spl":"2022-06-01","severity":"High","vanir_signatures":[{"id":"ASB-A-206986392-739dd3de","target":{"function":"onCreateContextMenu","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","deprecated":false,"signature_type":"Function","signature_version":"v1","digest":{"function_hash":"74675235477422270519684013993988859645","length":1041}},{"id":"ASB-A-206986392-d6ee3214","target":{"file":"src/com/android/settings/network/NetworkProviderSettings.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","deprecated":false,"signature_type":"Line","signature_version":"v1","digest":{"line_hashes":["72759330091169440706046299701103761556","96745820388189669581616755126377647186","87865666946076029588051594736439032788","252737809419705322495725229434262881927","218762167545415410902944374971461231256","314399651843304487252640965609731820434","280839746220081182866774948504646794383","1350036305887135929253374320924872697","81064503419041583093436632649403130594","272881835193739693634818982597145849953","191515802057777236387234656598664993193","311905520897081873321127502738113647701","119868343521868856342776231674499868491","47841180790468053334702365566593551732","248212345293161860846198535629283111794","26115151735908413201975903865781592943","216161841127094821162754238231683176768","281305200577974881795317529401554303009","232598706504478546211884083260189565560","237170114034437929832988191374660292602","247333107914320633484037729534948217010","164371200764742891788193256042550722578","154688404653072709596492445340016998985","179922275559886036550135941934979487273","92173793544998893813557468613625537171","314326959141032461913909579284862231984"],"threshold":0.9}},{"id":"ASB-A-206986392-e87ec892","target":{"function":"onCreate","file":"src/com/android/settings/network/NetworkProviderSettings.java"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/4c4a1f58c16d05c96dafae1047b44fe6e6a9a8c0","deprecated":false,"signature_type":"Function","signature_version":"v1","digest":{"length":192,"function_hash":"149372703456323609643363438701781236245"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-206986392.json"}}],"schema_version":"1.7.5"}