{"id":"ASB-A-179725730","details":"In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-179725730","CVE-2022-20466"],"modified":"2026-05-25T16:46:24.913870386Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/6888543d3a6cde5a9e16f9accb0a4256152aba2d"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/98239c0da68917a0622c24e9af16ce06768a68f2"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2022-12-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c561831af7af834b66ce0df3a169fffc08d2d3b5"],"vanir_signatures":[{"id":"ASB-A-179725730-42b90cca","source":"https://android.googlesource.com/platform/frameworks/base/+/c561831af7af834b66ce0df3a169fffc08d2d3b5","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/StatusBarWindowController.java","function":"applyKeyguardFlags"},"deprecated":false,"signature_type":"Function","digest":{"length":869,"function_hash":"32112785799434369277455898230085346341"},"signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c561831af7af834b66ce0df3a169fffc08d2d3b5","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/StatusBarWindowController.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["206388424328273095472547919735556360098","143742061301310899424399124699943284487","199439796058436299287260668393680552919","140682613378095423607532018032168411430","205640854106965017169913628306364284343","36858196382418987736342278877714197593","270289437993034780912143925452963611565","108856232352897871721345197359326466316"]},"id":"ASB-A-179725730-8c43ab7d"}],"severity":"High","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179725730.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-12-01"}]}],"versions":["11"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bc2146966bd931b18ef0a0243508a49be70e7d0b"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bc2146966bd931b18ef0a0243508a49be70e7d0b","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/NotificationShadeWindowController.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["206388424328273095472547919735556360098","143742061301310899424399124699943284487","199439796058436299287260668393680552919","106744106952491222330069386595066401645","115540909207101243672379137998540565970","298584398642579013765659294575866064382","132088261251775869681370521687697169569","178566187230414850999822235989713981936"]},"id":"ASB-A-179725730-0ee10a69"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bc2146966bd931b18ef0a0243508a49be70e7d0b","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/NotificationShadeWindowController.java","function":"applyKeyguardFlags"},"deprecated":false,"signature_type":"Function","digest":{"length":1067,"function_hash":"176507910328629998864627512409606461410"},"id":"ASB-A-179725730-f846d291"}],"severity":"High","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179725730.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-12-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/18ddad1f5a3d9592e063c3d3a70278bccc2e08e5"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/18ddad1f5a3d9592e063c3d3a70278bccc2e08e5","signature_version":"v1","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/NotificationShadeWindowControllerImpl.java","function":"applyKeyguardFlags"},"deprecated":false,"signature_type":"Function","digest":{"length":1811,"function_hash":"57140796250524282571834489060778882960"},"id":"ASB-A-179725730-869879d6"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/18ddad1f5a3d9592e063c3d3a70278bccc2e08e5","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/NotificationShadeWindowControllerImpl.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["169523476080409714836793397272207115125","54734196761798246902517049670059348202","239676799083180752913046959337186065538","11980846928859312755385768075647391572","243031757802001598505788680975253591531","120337641038823213914100008065611879597","28541874676783003466994450681132831710","178566187230414850999822235989713981936"]},"id":"ASB-A-179725730-c402404c"}],"severity":"High","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179725730.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-12-01"}]}],"versions":["12"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/98e3bfdebb99cb3f47b16cfde2181fcb553db8c8"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/98e3bfdebb99cb3f47b16cfde2181fcb553db8c8","target":{"file":"src/com/android/settings/password/ChooseLockPattern.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["77632166037785563477301649169355439862","206272812011591068626547451252104957714","109338183324050815369444470891531852019","42349531172320306814973152263390291023","6842066343258219881475667399303400142","185629602965231416143495472980400217426","330988969578661017702555886144300404478","211309291694407781043097154787800588039"]},"id":"ASB-A-179725730-45df9b9f"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/98e3bfdebb99cb3f47b16cfde2181fcb553db8c8","target":{"file":"src/com/android/settings/password/ChooseLockPattern.java","function":"onCreate"},"deprecated":false,"signature_type":"Function","digest":{"length":224,"function_hash":"1876796778353233715120306577456675337"},"id":"ASB-A-179725730-5aa9b61e"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/98e3bfdebb99cb3f47b16cfde2181fcb553db8c8","target":{"file":"src/com/android/settings/password/ChooseLockPassword.java","function":"onCreate"},"deprecated":false,"signature_type":"Function","digest":{"length":224,"function_hash":"1876796778353233715120306577456675337"},"id":"ASB-A-179725730-9695f520"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/98e3bfdebb99cb3f47b16cfde2181fcb553db8c8","target":{"file":"src/com/android/settings/password/ChooseLockPassword.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["77632166037785563477301649169355439862","227443652848767666876239169462992302764","160164407276467169775142383179500862973","283015014777678516905687575074464937147","6842066343258219881475667399303400142","185629602965231416143495472980400217426","257061215894855239412849028474193853457","59256534534552524715323150364103201883"]},"id":"ASB-A-179725730-e8d7f2ab"}],"severity":"High","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179725730.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-12-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bcebd3e9b935f4af10afc798bdb8c9b41992d3d8"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/bcebd3e9b935f4af10afc798bdb8c9b41992d3d8","signature_version":"v1","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/NotificationShadeWindowControllerImpl.java","function":"applyKeyguardFlags"},"deprecated":false,"signature_type":"Function","digest":{"length":1811,"function_hash":"57140796250524282571834489060778882960"},"id":"ASB-A-179725730-6d01f08f"},{"signature_version":"v1","id":"ASB-A-179725730-8dedb9ac","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/NotificationShadeWindowControllerImpl.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["169523476080409714836793397272207115125","54734196761798246902517049670059348202","239676799083180752913046959337186065538","11980846928859312755385768075647391572","243031757802001598505788680975253591531","120337641038823213914100008065611879597","28541874676783003466994450681132831710","178566187230414850999822235989713981936"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/bcebd3e9b935f4af10afc798bdb8c9b41992d3d8"}],"severity":"High","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179725730.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-12-01"}]}],"versions":["12L"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/27bddff2aca2b6095eba52f3a55532c511d77767"],"vanir_signatures":[{"id":"ASB-A-179725730-52f1675c","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/27bddff2aca2b6095eba52f3a55532c511d77767","target":{"file":"src/com/android/settings/password/ChooseLockPattern.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["56042887117134869756448428824110572018","273057023033934039431332532714873271421","109338183324050815369444470891531852019","42349531172320306814973152263390291023","6842066343258219881475667399303400142","185629602965231416143495472980400217426","330988969578661017702555886144300404478","211309291694407781043097154787800588039"]},"signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/27bddff2aca2b6095eba52f3a55532c511d77767","target":{"file":"src/com/android/settings/password/ChooseLockPattern.java","function":"onCreate"},"deprecated":false,"signature_type":"Function","digest":{"length":224,"function_hash":"1876796778353233715120306577456675337"},"id":"ASB-A-179725730-b265392f"},{"signature_version":"v1","id":"ASB-A-179725730-d4874e42","target":{"file":"src/com/android/settings/password/ChooseLockPassword.java","function":"onCreate"},"deprecated":false,"signature_type":"Function","digest":{"length":224,"function_hash":"1876796778353233715120306577456675337"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/27bddff2aca2b6095eba52f3a55532c511d77767"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/27bddff2aca2b6095eba52f3a55532c511d77767","id":"ASB-A-179725730-e40772e3","target":{"file":"src/com/android/settings/password/ChooseLockPassword.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["77632166037785563477301649169355439862","227443652848767666876239169462992302764","160164407276467169775142383179500862973","283015014777678516905687575074464937147","6842066343258219881475667399303400142","185629602965231416143495472980400217426","257061215894855239412849028474193853457","59256534534552524715323150364103201883"]},"signature_version":"v1"}],"severity":"High","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179725730.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6888543d3a6cde5a9e16f9accb0a4256152aba2d"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6888543d3a6cde5a9e16f9accb0a4256152aba2d","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/NotificationShadeWindowControllerImpl.java","function":"applyKeyguardFlags"},"deprecated":false,"signature_type":"Function","digest":{"length":1602,"function_hash":"238620553303241372667992318725306975830"},"id":"ASB-A-179725730-2911879e"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/6888543d3a6cde5a9e16f9accb0a4256152aba2d","id":"ASB-A-179725730-dfc8a093","target":{"file":"packages/SystemUI/src/com/android/systemui/statusbar/phone/NotificationShadeWindowControllerImpl.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["313189170293824864489143762395075268145","255245743891953634338961965248206490283","102618521164964906511069436832132808258","11980846928859312755385768075647391572","243031757802001598505788680975253591531","120337641038823213914100008065611879597","28541874676783003466994450681132831710","178566187230414850999822235989713981936"]},"signature_version":"v1"}],"severity":"Moderate","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179725730.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/aac79b894f960aab53e4026db4ba07e7eaf7959c"],"vanir_signatures":[{"id":"ASB-A-179725730-192ee6ae","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/aac79b894f960aab53e4026db4ba07e7eaf7959c","target":{"file":"src/com/android/settings/password/ChooseLockPattern.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["56042887117134869756448428824110572018","273057023033934039431332532714873271421","109338183324050815369444470891531852019","42349531172320306814973152263390291023","6842066343258219881475667399303400142","185629602965231416143495472980400217426","330988969578661017702555886144300404478","211309291694407781043097154787800588039"]},"signature_version":"v1"},{"signature_version":"v1","id":"ASB-A-179725730-2a34a7dc","target":{"file":"src/com/android/settings/password/ChooseLockPattern.java","function":"onCreate"},"deprecated":false,"signature_type":"Function","digest":{"length":224,"function_hash":"1876796778353233715120306577456675337"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/aac79b894f960aab53e4026db4ba07e7eaf7959c"},{"signature_version":"v1","id":"ASB-A-179725730-7306af98","target":{"file":"src/com/android/settings/password/ChooseLockPassword.java","function":"onCreate"},"deprecated":false,"signature_type":"Function","digest":{"length":224,"function_hash":"1876796778353233715120306577456675337"},"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/aac79b894f960aab53e4026db4ba07e7eaf7959c"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/aac79b894f960aab53e4026db4ba07e7eaf7959c","target":{"file":"src/com/android/settings/password/ChooseLockPassword.java"},"deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["77632166037785563477301649169355439862","227443652848767666876239169462992302764","160164407276467169775142383179500862973","283015014777678516905687575074464937147","6842066343258219881475667399303400142","185629602965231416143495472980400217426","257061215894855239412849028474193853457","59256534534552524715323150364103201883"]},"id":"ASB-A-179725730-c0b8158f"}],"severity":"Moderate","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179725730.json"}}],"schema_version":"1.7.5"}