CVE-2022-20199

Name of the Vulnerable Software and Affected Versions Android versions Android-13

Description In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations For Android version Android-13, consider restricting access to NFC tags to minimize the risk of exploitation until a patch is available. As a temporary workaround, review the NfcService.java file for potential issues related to confused deputy and apply necessary configuration changes to prevent local information disclosure.