{"id":"ASB-A-203229608","details":"In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-203229608","CVE-2022-20358"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/e86156084bcf92b6160577f48b5b2dd584349e2e"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/58270527d11ac7e5f07d337a402d8edf046a63ee"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2022-08-01"}]}],"versions":["10"],"ecosystem_specific":{"spl":"2022-08-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"onUnsyncableAccount"},"deprecated":false,"digest":{"length":189,"function_hash":"23096037474672351052542667682054836969"},"id":"ASB-A-203229608-01a9064b","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"},"deprecated":false,"digest":{"line_hashes":["322400280918135422706966235496911822283","254498682045391772804932203699266630890","179276403088554147119883537526889642889","282014528196759218477197451146887462406","65900348616326605297043079686785056953","215083058926083630847961054012045150546","106079145532905219669608228690671274802","283822823360417186884813107879533168484","125989896934915065894894688464265918803","205759945961187433774754748926977232987","84262161981391449687274516786370733663","46959678495744431603609192445435028763","46541165844700443694768212791724736018","209781946595908064742536814629121429047","60169708086742002015782174066392747414","190552234122100859095967742255409600208","43128430397075442698815650927709577097","209443256192360575367099289505881979864","262410595781490426960587823616748873998","194164563629677825341209254574691101076","238962504983600306593283541589522584948","197659230500706096526867334507135010744","133130405312019099252778147057515651104","143329196078543705119238900982267278322"],"threshold":0.9},"id":"ASB-A-203229608-2cc41428","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"startSync"},"deprecated":false,"digest":{"length":1275,"function_hash":"15657221728455951155093637392133169178"},"id":"ASB-A-203229608-442f60b9","signature_type":"Function"},{"target":{"function":"cancelSync","file":"core/java/android/content/AbstractThreadedSyncAdapter.java"},"deprecated":false,"digest":{"length":769,"function_hash":"159351572810310767380620140586165721701"},"id":"ASB-A-203229608-c4f6c6c6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-203229608.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-08-01"}]}],"versions":["11"],"ecosystem_specific":{"spl":"2022-08-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"onUnsyncableAccount"},"deprecated":false,"digest":{"function_hash":"23096037474672351052542667682054836969","length":189},"id":"ASB-A-203229608-03ac4371"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"cancelSync"},"deprecated":false,"digest":{"function_hash":"159351572810310767380620140586165721701","length":769},"id":"ASB-A-203229608-18979a87"},{"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"},"deprecated":false,"digest":{"line_hashes":["322400280918135422706966235496911822283","254498682045391772804932203699266630890","179276403088554147119883537526889642889","282014528196759218477197451146887462406","65900348616326605297043079686785056953","215083058926083630847961054012045150546","106079145532905219669608228690671274802","283822823360417186884813107879533168484","125989896934915065894894688464265918803","205759945961187433774754748926977232987","84262161981391449687274516786370733663","46959678495744431603609192445435028763","46541165844700443694768212791724736018","209781946595908064742536814629121429047","60169708086742002015782174066392747414","190552234122100859095967742255409600208","43128430397075442698815650927709577097","209443256192360575367099289505881979864","262410595781490426960587823616748873998","194164563629677825341209254574691101076","238962504983600306593283541589522584948","197659230500706096526867334507135010744","133130405312019099252778147057515651104","143329196078543705119238900982267278322"],"threshold":0.9},"id":"ASB-A-203229608-535229ff","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"},{"deprecated":false,"digest":{"function_hash":"15657221728455951155093637392133169178","length":1275},"id":"ASB-A-203229608-e8a5c199","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"startSync"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-203229608.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-08-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"onUnsyncableAccount"},"deprecated":false,"digest":{"function_hash":"23096037474672351052542667682054836969","length":189},"id":"ASB-A-203229608-025f5fca","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"},{"digest":{"length":769,"function_hash":"159351572810310767380620140586165721701"},"id":"ASB-A-203229608-5ce98eab","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"cancelSync"},"deprecated":false},{"id":"ASB-A-203229608-8fb7a56a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["322400280918135422706966235496911822283","254498682045391772804932203699266630890","179276403088554147119883537526889642889","282014528196759218477197451146887462406","65900348616326605297043079686785056953","215083058926083630847961054012045150546","106079145532905219669608228690671274802","283822823360417186884813107879533168484","125989896934915065894894688464265918803","205759945961187433774754748926977232987","84262161981391449687274516786370733663","46959678495744431603609192445435028763","46541165844700443694768212791724736018","209781946595908064742536814629121429047","60169708086742002015782174066392747414","190552234122100859095967742255409600208","43128430397075442698815650927709577097","209443256192360575367099289505881979864","262410595781490426960587823616748873998","194164563629677825341209254574691101076","238962504983600306593283541589522584948","197659230500706096526867334507135010744","133130405312019099252778147057515651104","143329196078543705119238900982267278322"]}},{"id":"ASB-A-203229608-f59ded9a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"startSync"},"deprecated":false,"digest":{"function_hash":"15657221728455951155093637392133169178","length":1275}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"],"severity":"High","spl":"2022-08-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-203229608.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2022-08-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["322400280918135422706966235496911822283","254498682045391772804932203699266630890","179276403088554147119883537526889642889","282014528196759218477197451146887462406","65900348616326605297043079686785056953","215083058926083630847961054012045150546","106079145532905219669608228690671274802","283822823360417186884813107879533168484","125989896934915065894894688464265918803","205759945961187433774754748926977232987","84262161981391449687274516786370733663","46959678495744431603609192445435028763","46541165844700443694768212791724736018","209781946595908064742536814629121429047","60169708086742002015782174066392747414","190552234122100859095967742255409600208","43128430397075442698815650927709577097","209443256192360575367099289505881979864","262410595781490426960587823616748873998","194164563629677825341209254574691101076","238962504983600306593283541589522584948","197659230500706096526867334507135010744","133130405312019099252778147057515651104","143329196078543705119238900982267278322"]},"id":"ASB-A-203229608-9289466b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"}},{"digest":{"function_hash":"15657221728455951155093637392133169178","length":1275},"id":"ASB-A-203229608-aac5768d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"startSync"},"deprecated":false},{"id":"ASB-A-203229608-f4e7d50b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"onUnsyncableAccount"},"deprecated":false,"digest":{"length":189,"function_hash":"23096037474672351052542667682054836969"}},{"digest":{"length":769,"function_hash":"159351572810310767380620140586165721701"},"id":"ASB-A-203229608-fcd70db9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"cancelSync"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-203229608.json"}}],"schema_version":"1.9.0"}