{"id":"ASB-A-203229608","details":"In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-203229608","CVE-2022-20358"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2022-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/e86156084bcf92b6160577f48b5b2dd584349e2e"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/58270527d11ac7e5f07d337a402d8edf046a63ee"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2022-08-01"}]}],"versions":["10"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"],"vanir_signatures":[{"deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"onUnsyncableAccount"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-01a9064b","digest":{"function_hash":"23096037474672351052542667682054836969","length":189},"signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-2cc41428","deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"},"digest":{"threshold":0.9,"line_hashes":["322400280918135422706966235496911822283","254498682045391772804932203699266630890","179276403088554147119883537526889642889","282014528196759218477197451146887462406","65900348616326605297043079686785056953","215083058926083630847961054012045150546","106079145532905219669608228690671274802","283822823360417186884813107879533168484","125989896934915065894894688464265918803","205759945961187433774754748926977232987","84262161981391449687274516786370733663","46959678495744431603609192445435028763","46541165844700443694768212791724736018","209781946595908064742536814629121429047","60169708086742002015782174066392747414","190552234122100859095967742255409600208","43128430397075442698815650927709577097","209443256192360575367099289505881979864","262410595781490426960587823616748873998","194164563629677825341209254574691101076","238962504983600306593283541589522584948","197659230500706096526867334507135010744","133130405312019099252778147057515651104","143329196078543705119238900982267278322"]},"signature_type":"Line"},{"signature_version":"v1","id":"ASB-A-203229608-442f60b9","deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"startSync"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","digest":{"function_hash":"15657221728455951155093637392133169178","length":1275},"signature_type":"Function"},{"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"cancelSync"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-c4f6c6c6","deprecated":false,"digest":{"function_hash":"159351572810310767380620140586165721701","length":769},"signature_type":"Function"}],"types":["ID"],"spl":"2022-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-203229608.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-08-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"],"spl":"2022-08-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"onUnsyncableAccount"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-03ac4371","digest":{"function_hash":"23096037474672351052542667682054836969","length":189},"signature_type":"Function"},{"signature_version":"v1","id":"ASB-A-203229608-18979a87","deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"cancelSync"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","digest":{"function_hash":"159351572810310767380620140586165721701","length":769},"signature_type":"Function"},{"deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-535229ff","digest":{"threshold":0.9,"line_hashes":["322400280918135422706966235496911822283","254498682045391772804932203699266630890","179276403088554147119883537526889642889","282014528196759218477197451146887462406","65900348616326605297043079686785056953","215083058926083630847961054012045150546","106079145532905219669608228690671274802","283822823360417186884813107879533168484","125989896934915065894894688464265918803","205759945961187433774754748926977232987","84262161981391449687274516786370733663","46959678495744431603609192445435028763","46541165844700443694768212791724736018","209781946595908064742536814629121429047","60169708086742002015782174066392747414","190552234122100859095967742255409600208","43128430397075442698815650927709577097","209443256192360575367099289505881979864","262410595781490426960587823616748873998","194164563629677825341209254574691101076","238962504983600306593283541589522584948","197659230500706096526867334507135010744","133130405312019099252778147057515651104","143329196078543705119238900982267278322"]},"signature_type":"Line"},{"id":"ASB-A-203229608-e8a5c199","deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"startSync"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","digest":{"length":1275,"function_hash":"15657221728455951155093637392133169178"},"signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-203229608.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-08-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"],"spl":"2022-08-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-203229608-025f5fca","deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"onUnsyncableAccount"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","digest":{"length":189,"function_hash":"23096037474672351052542667682054836969"},"signature_type":"Function"},{"deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"cancelSync"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-5ce98eab","digest":{"function_hash":"159351572810310767380620140586165721701","length":769},"signature_type":"Function"},{"deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-8fb7a56a","digest":{"threshold":0.9,"line_hashes":["322400280918135422706966235496911822283","254498682045391772804932203699266630890","179276403088554147119883537526889642889","282014528196759218477197451146887462406","65900348616326605297043079686785056953","215083058926083630847961054012045150546","106079145532905219669608228690671274802","283822823360417186884813107879533168484","125989896934915065894894688464265918803","205759945961187433774754748926977232987","84262161981391449687274516786370733663","46959678495744431603609192445435028763","46541165844700443694768212791724736018","209781946595908064742536814629121429047","60169708086742002015782174066392747414","190552234122100859095967742255409600208","43128430397075442698815650927709577097","209443256192360575367099289505881979864","262410595781490426960587823616748873998","194164563629677825341209254574691101076","238962504983600306593283541589522584948","197659230500706096526867334507135010744","133130405312019099252778147057515651104","143329196078543705119238900982267278322"]},"signature_type":"Line"},{"signature_version":"v1","id":"ASB-A-203229608-f59ded9a","deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"startSync"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","digest":{"function_hash":"15657221728455951155093637392133169178","length":1275},"signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-203229608.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"],"vanir_signatures":[{"deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-9289466b","digest":{"threshold":0.9,"line_hashes":["322400280918135422706966235496911822283","254498682045391772804932203699266630890","179276403088554147119883537526889642889","282014528196759218477197451146887462406","65900348616326605297043079686785056953","215083058926083630847961054012045150546","106079145532905219669608228690671274802","283822823360417186884813107879533168484","125989896934915065894894688464265918803","205759945961187433774754748926977232987","84262161981391449687274516786370733663","46959678495744431603609192445435028763","46541165844700443694768212791724736018","209781946595908064742536814629121429047","60169708086742002015782174066392747414","190552234122100859095967742255409600208","43128430397075442698815650927709577097","209443256192360575367099289505881979864","262410595781490426960587823616748873998","194164563629677825341209254574691101076","238962504983600306593283541589522584948","197659230500706096526867334507135010744","133130405312019099252778147057515651104","143329196078543705119238900982267278322"]},"signature_type":"Line"},{"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"startSync"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-aac5768d","deprecated":false,"digest":{"length":1275,"function_hash":"15657221728455951155093637392133169178"},"signature_type":"Function"},{"id":"ASB-A-203229608-f4e7d50b","deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"onUnsyncableAccount"},"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","digest":{"length":189,"function_hash":"23096037474672351052542667682054836969"},"signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff","signature_version":"v1","id":"ASB-A-203229608-fcd70db9","deprecated":false,"target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java","function":"cancelSync"},"digest":{"function_hash":"159351572810310767380620140586165721701","length":769},"signature_type":"Function"}],"types":["ID"],"spl":"2022-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-203229608.json"}}],"schema_version":"1.7.5"}