CVE-2022-20516 in Android
Summary
by MITRE • 12/16/2022
In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224002331
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 04/20/2026
The vulnerability identified as CVE-2022-20516 resides within the Android NFC (Near Field Communication) stack, specifically in the rw_t3t_act_handle_check_ndef_rsp function located in the rw_t3t.cc source file. This flaw represents a critical security weakness that affects Android 13 systems and is catalogued under Android ID A-224002331. The vulnerability manifests as an out-of-bounds read condition that stems from an integer overflow during NFC communication processing, making it particularly dangerous as it can be exploited remotely without requiring any special privileges or user interaction.
The technical implementation of this vulnerability occurs within the NFC Type 3 Tag communication handling mechanism where the system processes NDEF (NFC Data Exchange Format) responses from NFC tags. When the rw_t3t_act_handle_check_ndef_rsp function processes incoming data, an integer overflow occurs in the calculation or handling of buffer sizes or data lengths, leading to an out-of-bounds memory read. This condition allows an attacker to potentially extract sensitive information from memory locations that should remain protected, creating a remote information disclosure threat vector. The vulnerability is classified under CWE-191 as an Integer Underflow (Wrap or Wraparound) and aligns with ATT&CK technique T1552.001 for Unsecured Credentials and T1074.001 for Data Staged for Exfiltration.
The operational impact of this vulnerability extends beyond simple information disclosure as it represents a fundamental flaw in the NFC subsystem that could enable attackers to access sensitive data stored in memory, potentially including cryptographic keys, authentication tokens, or other confidential information. Since the exploit requires no user interaction and can be triggered remotely through NFC communication, it presents a significant risk to Android devices in close proximity to malicious NFC tags or systems. The vulnerability affects all Android 13 devices and could potentially compromise the security of NFC-based transactions, contactless payments, and other NFC-dependent services. This flaw undermines the security model of NFC communications by allowing unauthorized access to memory contents that should remain protected within the system's memory management boundaries.
Mitigation strategies for CVE-2022-20516 should focus on immediate patch deployment through official Android security updates, as well as implementing network-level controls to limit NFC communication where possible. Organizations should disable NFC functionality when not required and ensure all Android devices are updated to the latest security patches. Additionally, monitoring network traffic for suspicious NFC communication patterns and implementing proper access controls for NFC services can help reduce the attack surface. The vulnerability highlights the importance of proper integer overflow handling in security-critical systems and underscores the need for comprehensive code review processes that specifically target memory safety issues in mobile operating system components.