CVE-2022-42544
published 2022-12-16CVE-2022-42544: In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.21%
11.8th percentile
In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| platform | packages_apps_settings | >= 13:0 < 13:2022-12-01 | 13:2022-12-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android 13.0 AddAppNetworksFragment.java getView injection (A-224545390 / EUVD-2022-45611)
vuldb·2026-08-18·CVSS 7.8
CVE-2022-42544 [HIGH] Google Android 13.0 AddAppNetworksFragment.java getView injection (A-224545390 / EUVD-2022-45611)
A vulnerability labeled as problematic has been found in Google Android 13.0. Affected by this vulnerability is the function getView of the file AddAppNetworksFragment.java. Such manipulation leads to injection.
This vulnerability is listed as CVE-2022-42544. The attack must be carried out locally. There is no available exploit.
Applying a patch is advised to resolve this issue.
GHSA
GHSA-j2p8-g7vg-2chp: In getView of AddAppNetworksFragment
ghsa_unreviewed·2022-12-21
CVE-2022-42544 [HIGH] CWE-20 GHSA-j2p8-g7vg-2chp: In getView of AddAppNetworksFragment
In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390
OSV
CVE-2022-42544: In getView of AddAppNetworksFragment
osv·2022-12-01
CVE-2022-42544 CVE-2022-42544: In getView of AddAppNetworksFragment
In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-16
Published