{"id":"ASB-A-228315529","details":"In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-228315529","CVE-2022-20348"],"modified":"2026-04-28T15:17:37.552933Z","published":"2022-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/ba075274a7acc99bb15e3c3306b2768356aa0459"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/c877dce5834b810c8f83c999920aff143ebda720"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2022-08-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"target":{"file":"src/com/android/settings/location/BluetoothScanningPreferenceController.java"},"signature_version":"v1","match_only_versions":["10"],"digest":{"threshold":0.9,"line_hashes":["265465987013571789731866987743409649342","4703971492495835339413932759341780259","74030185683773627306434947612648689550","49050924439937700606596489369234830836","222443017917360690017754529722523641113","3538585105184413301890922817798770757","151265195881969875167420159758709121206","160758846789364349478991974818197348061","57333174814954139472941571485369201419","162810954599727497233229275668901085602"]},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9eff8f7a8d5140a4b674fa09cf333dce07fde76c","deprecated":false,"id":"ASB-A-228315529-03e91258","signature_type":"Line"},{"digest":{"function_hash":"56285076236989732979052329536235063044","length":186},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9eff8f7a8d5140a4b674fa09cf333dce07fde76c","signature_version":"v1","id":"ASB-A-228315529-999e5a56","deprecated":false,"target":{"function":"updateState","file":"src/com/android/settings/location/WifiScanningPreferenceController.java"},"signature_type":"Function"},{"target":{"function":"updateState","file":"src/com/android/settings/location/BluetoothScanningPreferenceController.java"},"signature_version":"v1","match_only_versions":["10"],"digest":{"function_hash":"278374646945805599418603771097304578314","length":185},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9eff8f7a8d5140a4b674fa09cf333dce07fde76c","deprecated":false,"id":"ASB-A-228315529-c2b0e8df","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["265465987013571789731866987743409649342","4703971492495835339413932759341780259","74030185683773627306434947612648689550","49050924439937700606596489369234830836","331623947982505324421344649724979599117","69646381778251111192855656214076355452","102388134778754710759175228443148470720","293414423130308108572655506937453655891","125518742726547323115013234190643707942","153062644858345650483652076748445622232"]},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/9eff8f7a8d5140a4b674fa09cf333dce07fde76c","signature_version":"v1","id":"ASB-A-228315529-c4dbdef6","deprecated":false,"target":{"file":"src/com/android/settings/location/WifiScanningPreferenceController.java"},"signature_type":"Line"}],"types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/9eff8f7a8d5140a4b674fa09cf333dce07fde76c"],"spl":"2022-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-228315529.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-08-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"target":{"file":"src/com/android/settings/location/BluetoothScanningPreferenceController.java"},"signature_version":"v1","match_only_versions":["11"],"digest":{"threshold":0.9,"line_hashes":["265465987013571789731866987743409649342","4703971492495835339413932759341780259","74030185683773627306434947612648689550","49050924439937700606596489369234830836","222443017917360690017754529722523641113","3538585105184413301890922817798770757","151265195881969875167420159758709121206","160758846789364349478991974818197348061","57333174814954139472941571485369201419","162810954599727497233229275668901085602"]},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/78799a550a6ea1bb9596b6b3ab6402ec8a038d6b","deprecated":false,"id":"ASB-A-228315529-17f00294","signature_type":"Line"},{"target":{"function":"updateState","file":"src/com/android/settings/location/WifiScanningPreferenceController.java"},"signature_version":"v1","match_only_versions":["11"],"digest":{"function_hash":"69427656324706457413289664527387219035","length":99},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/78799a550a6ea1bb9596b6b3ab6402ec8a038d6b","deprecated":false,"id":"ASB-A-228315529-1c3ad36f","signature_type":"Function"},{"target":{"function":"updateState","file":"src/com/android/settings/location/BluetoothScanningPreferenceController.java"},"signature_version":"v1","match_only_versions":["11"],"digest":{"function_hash":"278374646945805599418603771097304578314","length":185},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/78799a550a6ea1bb9596b6b3ab6402ec8a038d6b","deprecated":false,"id":"ASB-A-228315529-49aab251","signature_type":"Function"},{"target":{"file":"src/com/android/settings/location/WifiScanningPreferenceController.java"},"signature_version":"v1","match_only_versions":["11"],"digest":{"threshold":0.9,"line_hashes":["99013913879519102696052055958703064814","273112918311817402637346768846857481701","116167251503346558547168483310405139848","49050924439937700606596489369234830836","331623947982505324421344649724979599117","69646381778251111192855656214076355452","55283459930248996080395394811273838496","96214475995893836858128639684984834011","173747867879277242298206448091462430065","73863378189117060576880904204475074790"]},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/78799a550a6ea1bb9596b6b3ab6402ec8a038d6b","deprecated":false,"id":"ASB-A-228315529-594ebf72","signature_type":"Line"}],"types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/78799a550a6ea1bb9596b6b3ab6402ec8a038d6b"],"spl":"2022-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-228315529.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-08-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["23184264711393498245071180914282103853","39830521234849944994946219590550681399","155742129727250883708337687041073810118","186815278412314358408507146272859954620","77554387441052516123725910865319920933","54363651335152508179042401468724200768","230472932547116660262194911836233962432","307796422129454952691797021981263351806","71764438366883257694047763597142363304"]},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2598a722aef1a65fec2d9b66baf9e800fc72a7b5","signature_version":"v1","id":"ASB-A-228315529-9b6b8933","deprecated":false,"target":{"file":"src/com/android/settings/location/LocationServicesWifiScanningPreferenceController.java"},"signature_type":"Line"},{"digest":{"threshold":0.9,"line_hashes":["207585097716181857473610334268529485662","104112774008292982919074669773195409078","818305010081487469473605815201587168","119565777377284312808097834309661931797","25570923306797230711182842373920540320","628899777667075318127744147607438616","285521936436543950598816968694483023971","20554669810498112072569640539367194770","34221006646433070456653649588856518669"]},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/2598a722aef1a65fec2d9b66baf9e800fc72a7b5","signature_version":"v1","id":"ASB-A-228315529-fca32918","deprecated":false,"target":{"file":"src/com/android/settings/location/LocationServicesBluetoothScanningPreferenceController.java"},"signature_type":"Line"}],"types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/2598a722aef1a65fec2d9b66baf9e800fc72a7b5"],"spl":"2022-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-228315529.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["23184264711393498245071180914282103853","39830521234849944994946219590550681399","155742129727250883708337687041073810118","186815278412314358408507146272859954620","77554387441052516123725910865319920933","54363651335152508179042401468724200768","230472932547116660262194911836233962432","307796422129454952691797021981263351806","71764438366883257694047763597142363304"]},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a12fff673b59d7674b2ba04f30e92a9941fff7ac","signature_version":"v1","id":"ASB-A-228315529-be8b3c95","deprecated":false,"target":{"file":"src/com/android/settings/location/LocationServicesWifiScanningPreferenceController.java"},"signature_type":"Line"},{"digest":{"threshold":0.9,"line_hashes":["207585097716181857473610334268529485662","104112774008292982919074669773195409078","818305010081487469473605815201587168","119565777377284312808097834309661931797","25570923306797230711182842373920540320","628899777667075318127744147607438616","285521936436543950598816968694483023971","20554669810498112072569640539367194770","34221006646433070456653649588856518669"]},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a12fff673b59d7674b2ba04f30e92a9941fff7ac","signature_version":"v1","id":"ASB-A-228315529-dda57312","deprecated":false,"target":{"file":"src/com/android/settings/location/LocationServicesBluetoothScanningPreferenceController.java"},"signature_type":"Line"}],"types":["EoP"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/a12fff673b59d7674b2ba04f30e92a9941fff7ac"],"spl":"2022-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-228315529.json"}}],"schema_version":"1.7.5"}