Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Google Android Wi‑Fi module can crash and stay down

CVE-2022-20499 · published 3 years ago
Summary

The Wi‑Fi configuration code in Android can mishandle corrupted settings, causing the Wi‑Fi function to stop working and remain disabled. This can happen without any user interaction and does not require special permissions. Install the latest Android update from Google, and if you notice Wi‑Fi not working, restart the device as a temporary workaround.

What to do
  • Update google platform/packages/modules/wifi to version 12:2023-03-01.
  • Update google platform/packages/modules/wifi to version 12L:2023-03-01.
  • Update google platform/packages/modules/wifi to version 13:2023-03-01.
Affected software
Ecosystem VendorProductAffected versions
Android google platform/packages/modules/wifi >= 12:0, < 12:2023-03-01
>= 12L:0, < 12L:2023-03-01
>= 13:0, < 13:2023-03-01
Fix: upgrade to 12:2023-03-01
– google android 12.0
12.1
13.0
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
Original advisory text
In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no additional execution privileges needed...
In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published1 Mar 2023
Updated26 Oct 2026
First seen10 Sep 2026
Sources
ASB-A-246539931 · OSV
CVE-2022-20499 · NVD
Track software like this
Free during beta