{"id":"CVE-2022-20139","aliases":["A-211647233","PUB-A-211647233"],"status":"published","description":"In onCreate of VzwSetupActivity.java, there is a possible bypass of carrier network restrictions through ESIM due to a missing configuration check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-06-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":"platform/vendor/unbundled_google/packages/CarrierEntitlement","fixed_in":["12L:2022-06-01"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":"platform/vendor/unbundled_google/packages/CarrierEntitlement","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-06-01"}]}],"versions":["12L"]}],"references":[{"url":"https://source.android.com/security/bulletin/2022-06-01","tags":["advisory"]}],"sources":{"osv":[{"id":"PUB-A-211647233","description":"In onCreate of VzwSetupActivity.java, there is a possible bypass of carrier network restrictions through ESIM due to a missing configuration check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2022-06-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:17.438327Z"}]}}