{"id":"PUB-A-185513714","details":"In TBD of GattDebugUtils.java, there is a possible permission bypass due to accidentally enabling debug_admin . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-185513714","CVE-2022-20207"],"modified":"2026-09-21T16:00:45.521740994Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L-next:0"},{"fixed":"12L-next:2022-06-01"}]}],"versions":["12L-next"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c538aa980c17547a04d316f7d82c2d43856e164d","target":{"file":"android/app/src/com/android/bluetooth/gatt/GattServiceConfig.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["310264222601774262554073906312179050471","233851378929737165976130497824506340663"]},"id":"PUB-A-185513714-d62c309b","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c538aa980c17547a04d316f7d82c2d43856e164d"],"severity":"Moderate","spl":"2022-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-185513714.json"}},{"package":{"name":"platform/packages/apps/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"Moderate","spl":"2022-06-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["310264222601774262554073906312179050471","233851378929737165976130497824506340663"]},"id":"PUB-A-185513714-75917028","match_only_versions":["12L"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/2109e7a24a18a3d2c87b6a7bbb545a1246ea21b6","target":{"file":"src/com/android/bluetooth/gatt/GattServiceConfig.java"}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/2109e7a24a18a3d2c87b6a7bbb545a1246ea21b6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-185513714.json"}}],"schema_version":"1.9.0"}