PUB-A-246649179
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/PUB-A-246649179.json
- JSON Data
- https://api.osv.dev/v1/vulns/PUB-A-246649179
- Aliases
-
- A-246649179
- CVE-2022-20507
- Published
- 2022-12-01T00:00:00Z
- Modified
- 2026-09-14T15:29:34Z
- Summary
- [none]
- Details
-
In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- References
Affected packages
Android / platform/packages/modules/Uwb
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Uwb/+/4c7892059f1722aff75111627dcdb49ece7e52a1"
],
"severity": "Moderate",
"spl": "2022-12-01",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"327855466733719775500748613292046466582",
"275618921786883186575756433754854313469",
"235794999975364904245979153751753698096"
],
"threshold": 0.9
},
"id": "PUB-A-246649179-bc90a7ba",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Uwb/+/4c7892059f1722aff75111627dcdb49ece7e52a1",
"target": {
"file": "service/uci/jni/UwbEventManager.cpp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "257818005522242306903828350521367885099",
"length": 1981
},
"id": "PUB-A-246649179-f045eb84",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Uwb/+/4c7892059f1722aff75111627dcdb49ece7e52a1",
"target": {
"file": "service/uci/jni/UwbEventManager.cpp",
"function": "UwbEventManager::onMulticastListUpdateNotificationReceived"
}
}
]
}