{"id":"CVE-2022-20304","aliases":["EUVD-2022-25564","GHSA-qpgx-23mw-7f3q"],"status":"published","title":"In Content, there is a possible way to determinate the user's account due to side channel...","description":"In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.001,"percentile":0.00872,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-203"],"published":"2022-08-11T15:22:26Z","modified":"2026-06-17T04:24:03Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/android-13","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20304"},{"url":"https://github.com/advisories/GHSA-qpgx-23mw-7f3q"}],"sources":{"cve":[{"id":"CVE-2022-20304","description":"In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919","status":"published","published":"2022-08-11T15:22:26Z","modified":"2024-08-03T02:10:44.058Z","updated_at":"2026-11-02T14:34:24.971323Z"}],"euvd":[{"id":"EUVD-2022-25564","description":"In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919","status":"published","published":"2022-08-11T15:22:26Z","modified":"2024-08-03T02:10:44Z","updated_at":"2026-11-03T03:25:54.957993Z"}],"ghsa":[{"id":"GHSA-qpgx-23mw-7f3q","title":"In Content, there is a possible way to determinate the user's account due to side channel...","description":"In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919","status":"published","published":"2022-08-13T00:00:44Z","modified":"2023-01-27T05:06:48Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:42:59.735626Z"}],"nvd":[{"id":"CVE-2022-20304","description":"In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-199751919","status":"published","published":"2022-08-12T15:15:11.65Z","modified":"2026-06-17T04:24:03.33Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:07:24.750124Z"}]}}