CVE-2022-20499

Name of the Vulnerable Software and Affected Versions Android versions Android-12 through Android-13

Description The issue arises from uncaught errors in parsing stored configurations within the validateForCommonR1andR2 function of PasspointConfiguration.java. This can lead to a local persistent denial of service without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android versions Android-12 through Android-13, update to a version that includes a fix for the issue in PasspointConfiguration.java, specifically addressing the validateForCommonR1andR2 function to prevent uncaught errors during configuration parsing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.