CVE-2022-20508: 
NixOS vulnerability analysis and mitigation

CVE-2022-20508 is a vulnerability in Android's ConfigureWifiSettings.java component that was discovered in October 2021 and disclosed in December 2022. The vulnerability affects Android 13 and allows a guest user to change WiFi settings through a permissions bypass in the onAttach function (CVE Details).

The vulnerability exists in the onAttach function of ConfigureWifiSettings.java where a permissions bypass allows unauthorized access to WiFi settings. It has been assigned a moderate severity rating. The vulnerability can be exploited without additional execution privileges and requires no user interaction (CVE Details).

If exploited, this vulnerability allows a guest user to modify WiFi settings on the device, which should normally be restricted. This represents a local escalation of privilege as it gives guest users capabilities that should be limited to users with higher privileges (CVE Details).

The vulnerability was addressed in the Android Security Bulletin for December 2022. Users should update their Android devices to the latest available security patch level to mitigate this vulnerability (Android Bulletin).