{"id":"PUB-A-224772890","details":"In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-224772890","CVE-2022-20503"],"modified":"2026-05-29T15:55:33.750044621Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/a8ccc3456cce30fc9820463b8eadf3bc904a111b"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"17362057474275922495040886120710217654","length":776},"id":"PUB-A-224772890-05397e00","match_only_versions":["13"],"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a8ccc3456cce30fc9820463b8eadf3bc904a111b","deprecated":false,"target":{"file":"src/com/android/settings/wifi/dpp/WifiDppConfiguratorActivity.java","function":"handleIntent"},"signature_version":"v1","signature_type":"Function"},{"digest":{"line_hashes":["284409016661277852249055862271468968191","88343878351731781467530812455841524601","268410833658765093990161559055301838959","196404895235203806792852603024638757159","145619341685230890904485357133784252748","12739285103991228539654874115911569765","97728168410840271744904920456774192143","88217963427347387323026523374435631321","263559086293115197460536902851089762306","286507731333821125958766463084935498760","187090161818788161472812566479284379283","139897086758789540371648451576876444314","149632712310068680959323103405220691226","184668579298472044786153662318600052837","288266156223492552929657424203223801702","177752152982758136672219732239250502513","40627836306868213110787682227972314116","220884027888050459794073188008898298494","67285741456772442012070940876174401461"],"threshold":0.9},"id":"PUB-A-224772890-e211b2ea","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a8ccc3456cce30fc9820463b8eadf3bc904a111b","match_only_versions":["13"],"deprecated":false,"target":{"file":"src/com/android/settings/wifi/dpp/WifiDppConfiguratorActivity.java"},"signature_version":"v1","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/a8ccc3456cce30fc9820463b8eadf3bc904a111b"],"types":["EoP"],"spl":"2022-12-01","severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-224772890.json"}}],"schema_version":"1.7.5"}