{"id":"PUB-A-246649179","details":"In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-246649179","CVE-2022-20507"],"modified":"2026-09-21T16:00:45.521740994Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Uw+/4c7892059f1722aff75111627dcdb49ece7e52a1"}],"affected":[{"package":{"name":"platform/packages/modules/Uwb","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Uwb/+/4c7892059f1722aff75111627dcdb49ece7e52a1"],"severity":"Moderate","spl":"2022-12-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Uwb/+/4c7892059f1722aff75111627dcdb49ece7e52a1","target":{"file":"service/uci/jni/UwbEventManager.cpp"},"deprecated":false,"digest":{"line_hashes":["327855466733719775500748613292046466582","275618921786883186575756433754854313469","235794999975364904245979153751753698096"],"threshold":0.9},"id":"PUB-A-246649179-bc90a7ba"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Uwb/+/4c7892059f1722aff75111627dcdb49ece7e52a1","target":{"file":"service/uci/jni/UwbEventManager.cpp","function":"UwbEventManager::onMulticastListUpdateNotificationReceived"},"deprecated":false,"digest":{"function_hash":"257818005522242306903828350521367885099","length":1981},"id":"PUB-A-246649179-f045eb84"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-246649179.json"}}],"schema_version":"1.9.0"}