Vulnerability Database

317,828

Total vulnerabilities in the database

CVE-2022-20499

In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-246539931

  • Published: Mar 24, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-20499
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

No CWE or OWASP classifications available.

Software From Fixed in
google / android 12.0 12.0.x
google / android 12.1 12.1.x
google / android 13.0 13.0.x