{"id":"ASB-A-225880741","details":"In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-225880741","CVE-2022-20467"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/29a297b4c31acac87fe854fa28a2054226fd9e8c"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-03-01"}]}],"versions":["13-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/153caf081381c896ea2808092db265b21e95b79c"],"severity":"High","spl":"2023-03-01","types":["ID"],"vanir_signatures":[{"digest":{"function_hash":"261329455908047184565872185916903753976","length":123},"id":"ASB-A-225880741-07ea022c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/153caf081381c896ea2808092db265b21e95b79c","target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppUtility.java","function":"isBluetoothShareUri"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/153caf081381c896ea2808092db265b21e95b79c","target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppUtility.java"},"deprecated":false,"digest":{"line_hashes":["316707232245811723912201586800200398395","109771264482061673313934754623092882309","309952113044682722106782716479657801352","217933077910029420220650371611846817311","22813210918215448057860708162486899647","192438461793407648110148612138627636587","254622851146180678188247996846260273558","273102632977374839095363248019415478494"],"threshold":0.9},"id":"ASB-A-225880741-f13a8076","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-225880741.json"}},{"package":{"name":"platform/packages/apps/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-03-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","spl":"2023-03-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c","target":{"file":"src/com/android/bluetooth/opp/BluetoothOppUtility.java"},"deprecated":false,"digest":{"line_hashes":["231265469921722254443663198676858435085","113926598669968991082154297249782273070","53995942397248229722879773008775705568","150990503994559136012071417099121170355","22813210918215448057860708162486899647","192438461793407648110148612138627636587","254622851146180678188247996846260273558","273102632977374839095363248019415478494"],"threshold":0.9},"id":"ASB-A-225880741-6694e260","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c","target":{"file":"src/com/android/bluetooth/opp/BluetoothOppUtility.java","function":"isBluetoothShareUri"},"deprecated":false,"digest":{"length":123,"function_hash":"261329455908047184565872185916903753976"},"id":"ASB-A-225880741-80962e24","match_only_versions":["11"]}],"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-225880741.json"}},{"package":{"name":"platform/packages/apps/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-03-01"}]}],"versions":["12"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"line_hashes":["231265469921722254443663198676858435085","113926598669968991082154297249782273070","53995942397248229722879773008775705568","150990503994559136012071417099121170355","22813210918215448057860708162486899647","192438461793407648110148612138627636587","254622851146180678188247996846260273558","273102632977374839095363248019415478494"],"threshold":0.9},"id":"ASB-A-225880741-27bf44b1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c","target":{"file":"src/com/android/bluetooth/opp/BluetoothOppUtility.java"},"deprecated":false},{"target":{"file":"src/com/android/bluetooth/opp/BluetoothOppUtility.java","function":"isBluetoothShareUri"},"deprecated":false,"digest":{"length":123,"function_hash":"261329455908047184565872185916903753976"},"id":"ASB-A-225880741-8740f8cc","match_only_versions":["12"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c"],"severity":"High","spl":"2023-03-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-225880741.json"}},{"package":{"name":"platform/packages/apps/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-03-01"}]}],"versions":["12L"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c"],"severity":"High","spl":"2023-03-01","types":["ID"],"vanir_signatures":[{"match_only_versions":["12L"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c","target":{"file":"src/com/android/bluetooth/opp/BluetoothOppUtility.java","function":"isBluetoothShareUri"},"deprecated":false,"digest":{"function_hash":"261329455908047184565872185916903753976","length":123},"id":"ASB-A-225880741-3cddf2fb"},{"id":"ASB-A-225880741-59b74881","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/apps/Bluetooth/+/d0957cfdf1fc1b36620c1545643ffbc37f0ac24c","target":{"file":"src/com/android/bluetooth/opp/BluetoothOppUtility.java"},"deprecated":false,"digest":{"line_hashes":["231265469921722254443663198676858435085","113926598669968991082154297249782273070","53995942397248229722879773008775705568","150990503994559136012071417099121170355","22813210918215448057860708162486899647","192438461793407648110148612138627636587","254622851146180678188247996846260273558","273102632977374839095363248019415478494"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-225880741.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-03-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2023-03-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":123,"function_hash":"261329455908047184565872185916903753976"},"id":"ASB-A-225880741-7861eebe","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/29a297b4c31acac87fe854fa28a2054226fd9e8c","target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppUtility.java","function":"isBluetoothShareUri"}},{"digest":{"threshold":0.9,"line_hashes":["316707232245811723912201586800200398395","109771264482061673313934754623092882309","309952113044682722106782716479657801352","217933077910029420220650371611846817311","22813210918215448057860708162486899647","192438461793407648110148612138627636587","254622851146180678188247996846260273558","273102632977374839095363248019415478494"]},"id":"ASB-A-225880741-ef4dfc66","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/29a297b4c31acac87fe854fa28a2054226fd9e8c","target":{"file":"android/app/src/com/android/bluetooth/opp/BluetoothOppUtility.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/29a297b4c31acac87fe854fa28a2054226fd9e8c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-225880741.json"}}],"schema_version":"1.9.0"}