{"id":"PUB-A-235601169","details":"In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive settings due to a missing permission check. This could lead to local escalation of privilege from the Guest user with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-235601169","CVE-2022-20537"],"modified":"2026-04-23T15:15:38.048727Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/8b1e21f92998c85e728a502fe52be23a7e3696ee"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["EoP"],"severity":"Moderate","vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/8b1e21f92998c85e728a502fe52be23a7e3696ee","target":{"function":"createDialog","file":"src/com/android/settings/wifi/WifiScanModeActivity.java"},"signature_type":"Function","match_only_versions":["13"],"id":"PUB-A-235601169-06979785","signature_version":"v1","digest":{"length":150,"function_hash":"34728420961191027874925828834925442004"},"deprecated":false},{"id":"PUB-A-235601169-f86a81bb","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/8b1e21f92998c85e728a502fe52be23a7e3696ee","target":{"file":"src/com/android/settings/wifi/WifiScanModeActivity.java"},"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["49495261199254921952323577008448206907","78016449987601987235791248165404880181","304748368377060064966815848641393205699","268257495089161562332630312097263370617","20084663032027974877644383978751334526","24244162159008669250711786970111926944","128902167704304713786662264768397034737","203742218110522710565404928247286224076","89376418065807262447808223030731093779","192783271548435201179492028009613489935","205590085519228782754809691205375309939","64950636608198087317492626991849203076","309311672629146260666418030897801897204","275061548306180913522711608089488951383","88385865971706246233390319659732845112","67591367833042427268291829365403322585","130811660742352081567886956322758940129","337804296410846834241371898750323520206"]},"deprecated":false}],"spl":"2022-12-01","fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/8b1e21f92998c85e728a502fe52be23a7e3696ee"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-235601169.json"}}],"schema_version":"1.7.5"}