{"id":"ASB-A-221041256","details":"In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-221041256","CVE-2022-20353"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-08-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-08-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/a9da6b809944018ef4c1a8eaecdec9cdecf47e15"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/1de10d24aa8d6a54b991299091877b18ee696d73"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/9bd1402e5aa758f2843154f395b5a5dfa91c1dca"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/e4c22580c9a66a3d5523782c2daa707531210227"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/ec3ae8bb178b8b5fb54572632e77984f9bfd5b86"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Settings/+/40fbcf333f09a92d6499cf94d67c60c3a03c9a33"}],"affected":[{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10:0"},{"fixed":"10:2022-08-01"}]}],"versions":["10"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["271736351209468321920923821596500881208","208411807507461914842515677540047944112","170974526492928665088682842224004720605","254402503382490168774319515126907561196","155983827564087819325286520719013472212","25746897509134563261658487765073342980","137382685630632855049870634427227194704","20047480911159830523004219151482838945"]},"id":"ASB-A-221041256-14b0318a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/640eab60f2baa9052d395fccd4a0324103ad6c7a","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d94b73b3041614a5ff57c7745f50f235bf6c7783","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["155983827564087819325286520719013472212","277880234744503426319297610589008749477","308578646048862143902743257230880885922","148410585817398078295239450436696621955"],"threshold":0.9},"id":"ASB-A-221041256-74c563d4","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/d94b73b3041614a5ff57c7745f50f235bf6c7783","target":{"function":"onSaveRingtone","file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"function_hash":"271031607249745761687440038053175194985","length":503},"id":"ASB-A-221041256-b8537d4b","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-221041256-ba13ea38","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/640eab60f2baa9052d395fccd4a0324103ad6c7a","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"},"deprecated":false,"digest":{"function_hash":"147338097060983358059978639853961100975","length":103}}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/640eab60f2baa9052d395fccd4a0324103ad6c7a","https://android.googlesource.com/platform/packages/apps/Settings/+/edf44161770a8d3aa5105b51d701c3abdae1776e","https://android.googlesource.com/platform/packages/apps/Settings/+/d94b73b3041614a5ff57c7745f50f235bf6c7783"],"severity":"High","spl":"2022-08-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-221041256.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2022-08-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1682354551b8ee3c35a9ee1c1d9dc8238f5d6117","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["271736351209468321920923821596500881208","208411807507461914842515677540047944112","170974526492928665088682842224004720605","254402503382490168774319515126907561196","155983827564087819325286520719013472212","25746897509134563261658487765073342980","137382685630632855049870634427227194704","20047480911159830523004219151482838945"],"threshold":0.9},"id":"ASB-A-221041256-3dc1d0e4"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/973a46134b439b6dce2626bb0ba8ac34af7db29c","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["155983827564087819325286520719013472212","277880234744503426319297610589008749477","308578646048862143902743257230880885922","148410585817398078295239450436696621955"]},"id":"ASB-A-221041256-7807d205"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1682354551b8ee3c35a9ee1c1d9dc8238f5d6117","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"},"deprecated":false,"digest":{"function_hash":"147338097060983358059978639853961100975","length":103},"id":"ASB-A-221041256-7bbd47ac","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/973a46134b439b6dce2626bb0ba8ac34af7db29c","target":{"function":"onSaveRingtone","file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"function_hash":"271031607249745761687440038053175194985","length":503},"id":"ASB-A-221041256-f26ead89","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/1682354551b8ee3c35a9ee1c1d9dc8238f5d6117","https://android.googlesource.com/platform/packages/apps/Settings/+/32145cc362f9b111a7239539466eb5c788445a11","https://android.googlesource.com/platform/packages/apps/Settings/+/973a46134b439b6dce2626bb0ba8ac34af7db29c"],"severity":"High","spl":"2022-08-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-221041256.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2022-08-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2022-08-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f288d3a31bfc96e9680eaab2a312964ca1062f34","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"line_hashes":["271736351209468321920923821596500881208","208411807507461914842515677540047944112","170974526492928665088682842224004720605","254402503382490168774319515126907561196","155983827564087819325286520719013472212","25746897509134563261658487765073342980","137382685630632855049870634427227194704","20047480911159830523004219151482838945"],"threshold":0.9},"id":"ASB-A-221041256-ab0f2b53","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["155983827564087819325286520719013472212","277880234744503426319297610589008749477","308578646048862143902743257230880885922","148410585817398078295239450436696621955"],"threshold":0.9},"id":"ASB-A-221041256-b0130996","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/67b9fb57ea1e3ff5afdd7275da96a1c4add288ed","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"}},{"id":"ASB-A-221041256-cae45ffe","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/67b9fb57ea1e3ff5afdd7275da96a1c4add288ed","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"},"deprecated":false,"digest":{"function_hash":"271031607249745761687440038053175194985","length":503}},{"digest":{"function_hash":"147338097060983358059978639853961100975","length":103},"id":"ASB-A-221041256-d3c3d50e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/f288d3a31bfc96e9680eaab2a312964ca1062f34","target":{"function":"onSaveRingtone","file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/f288d3a31bfc96e9680eaab2a312964ca1062f34","https://android.googlesource.com/platform/packages/apps/Settings/+/0d8d05a22138a2d64cb3690af8edf88c1782a901","https://android.googlesource.com/platform/packages/apps/Settings/+/67b9fb57ea1e3ff5afdd7275da96a1c4add288ed"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-221041256.json"}},{"package":{"name":"platform/packages/apps/Settings","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-08-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/1b7fa6f8fc42924af0b0cfbad25f3405de706a9f","https://android.googlesource.com/platform/packages/apps/Settings/+/90968c8437dbac230808742f108c0f733b38f28c","https://android.googlesource.com/platform/packages/apps/Settings/+/46e00dc6dfe02a870fe953c18d2002b7e5662058"],"severity":"High","spl":"2022-08-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-221041256-0a0e6c5b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/46e00dc6dfe02a870fe953c18d2002b7e5662058","target":{"function":"onSaveRingtone","file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"function_hash":"271031607249745761687440038053175194985","length":503}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1b7fa6f8fc42924af0b0cfbad25f3405de706a9f","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java","function":"onSaveRingtone"},"deprecated":false,"digest":{"function_hash":"147338097060983358059978639853961100975","length":103},"id":"ASB-A-221041256-57bb95c8","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/1b7fa6f8fc42924af0b0cfbad25f3405de706a9f","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["271736351209468321920923821596500881208","208411807507461914842515677540047944112","170974526492928665088682842224004720605","254402503382490168774319515126907561196","155983827564087819325286520719013472212","25746897509134563261658487765073342980","137382685630632855049870634427227194704","20047480911159830523004219151482838945"]},"id":"ASB-A-221041256-74b23108"},{"digest":{"line_hashes":["155983827564087819325286520719013472212","277880234744503426319297610589008749477","308578646048862143902743257230880885922","148410585817398078295239450436696621955"],"threshold":0.9},"id":"ASB-A-221041256-b687c564","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Settings/+/46e00dc6dfe02a870fe953c18d2002b7e5662058","target":{"file":"src/com/android/settings/DefaultRingtonePreference.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-221041256.json"}}],"schema_version":"1.9.0"}