{"id":"PUB-A-199291025","details":"In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-199291025","CVE-2022-20199"],"modified":"2026-04-08T15:00:25.631816Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/90d2c04d988ea90138042d85f861a40afb76f705"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/90d2c04d988ea90138042d85f861a40afb76f705"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","target":{"file":"core/java/android/nfc/Tag.java","function":"writeToParcel"},"digest":{"length":370,"function_hash":"228910055993601006408260322859620944637"},"source":"https://android.googlesource.com/platform/frameworks/base/+/90d2c04d988ea90138042d85f861a40afb76f705","id":"PUB-A-199291025-44cce820","deprecated":false,"match_only_versions":["13"]},{"signature_type":"Function","signature_version":"v1","target":{"file":"core/java/android/nfc/Tag.java","function":"createMockTag"},"digest":{"length":118,"function_hash":"288723020152768491564380649144350048909"},"source":"https://android.googlesource.com/platform/frameworks/base/+/90d2c04d988ea90138042d85f861a40afb76f705","id":"PUB-A-199291025-97262f16","deprecated":false,"match_only_versions":["13"]},{"target":{"file":"core/java/android/nfc/Tag.java","function":"Tag"},"digest":{"length":580,"function_hash":"75574334044654999722375080134215737420"},"source":"https://android.googlesource.com/platform/frameworks/base/+/90d2c04d988ea90138042d85f861a40afb76f705","id":"PUB-A-199291025-dca2ea42","signature_type":"Function","deprecated":false,"signature_version":"v1"},{"target":{"file":"core/java/android/nfc/Tag.java"},"digest":{"threshold":0.9,"line_hashes":["75826017547751689359906288168362579942","218527116716407971086642852943158250102","168973856225589253977743056777208036884","77664397105102708486060075419358990530","182984410729477010966957327964807341153","323442142402352807833211738361511593620","14230890380888711267068734516094417267","99978857895936601196390226402567242242","294977385888727288235993125817390763419","284428197266274806733641204587961138104","305539603822275182259890749827174269931","286680593721379623565878217012891940017","114368802226586988611255365192298393836","223568327603182081744540239294657759159","59354948975628462002757021145156754750","154240307618326874490742009582292101745","6910901055697159255487948666990816472","131437733495972663280168884723348349292","240304406951932134261273458694520227647","215163660421725850980893893775318416424","21349837310493117126040166714005202835","236806621672769295911957844034634935531","331569125504612200886347952316790333618","149677275950817840947015866169319328625","264150260384606759436473556392072091229","302617732986476537642293631698627257807","127356445551663730610616497521716897200","207250587054042085237725639590241848691","276515002543738886583886999955130096381","219338329744783372766580650341379728908","193151433893591041131213399771136660068","159000468233181969323071982923104345499","17936816468053447528909470558734576723","24864699734238265339186280638271997367","113535788353335294655919776510412195512","63451406828791622255079501367221115348","124005279753869197890700700493824251145","313243154114600911844918578063593828293","236436694619147011681659832242403348934","175725455213205374325889992049653201917","44489724610428113554830747374304792184","264084279298751113204370848310166624635","297008407134199780576098592359077813224"]},"source":"https://android.googlesource.com/platform/frameworks/base/+/90d2c04d988ea90138042d85f861a40afb76f705","id":"PUB-A-199291025-ea765a09","signature_type":"Line","deprecated":false,"signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","target":{"file":"core/java/android/nfc/Tag.java","function":"createFromParcel"},"digest":{"length":435,"function_hash":"76521651657170629098724294348020444917"},"source":"https://android.googlesource.com/platform/frameworks/base/+/90d2c04d988ea90138042d85f861a40afb76f705","id":"PUB-A-199291025-f49eae44","deprecated":false,"match_only_versions":["13"]}],"types":["ID"],"spl":"2022-12-01","severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-199291025.json"}},{"package":{"name":"platform/packages/apps/Nfc","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70"],"vanir_signatures":[{"target":{"file":"src/com/android/nfc/NfcService.java","function":"isTagUpToDate"},"digest":{"length":414,"function_hash":"241957864946107177924050211226227948049"},"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70","id":"PUB-A-199291025-29b75807","signature_type":"Function","deprecated":false,"signature_version":"v1"},{"target":{"file":"src/com/android/nfc/NfcService.java"},"digest":{"threshold":0.9,"line_hashes":["236523874113583041612037156495058417607","9488410708926967528297828831063981115","102313942456620587616915930920412975166","61657713972363115416944545388946362841","280163816654132908160689489300927167101","83413471524456207431436907297918127318","123761355787093788788107621778646952328","100938034401585286732445768975819479935","55166014893749486199839083879400776909","282205312345036573292798731963903490709","13493842005396674158231940618027407630","82298270174857836712339419009099785932","54426169855663579600625513442344230922","5455810205884880170079918342370789756","209890855245644142408750351550481092805","63726227642034911877592959509258455839","67643091918787772748798126428556196967","156767400109015197780450476070099051318","79917195873948892076114199138337417861","231366692523760474396420296783379531015","219625356762333396589264977659135862336","115015776824194393489934728380613064946","196349865794227853190558059482642994508","134649837750060401370364226335323206385","161252698602001836511629478140097586069","240430294754099573504417334425450230976","201314074583121594954019470120538552262","88024182005648753404943803834649514663","244751902383636087561567831555676317386","314836917333237606222040667978667628509","131779842293869028489642512733011198779","62240256476214172782096195834385274737","276892610332312998257770312828240968811","306424791210059178714192220181281487489","182613300601691859572812876505917609569","278019377394303208318088765106675430727","19755597696100791961923540106327088078","180980963921137994197799217076665451369","262690208544084714063901795670828387087","334619906281342516176643149081653146878","321591634692931568652550452904615960078","308631845498502147212906414349756619276","130763100322956340752847333220678107880","63938213896158703243768757032788788490"]},"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70","id":"PUB-A-199291025-56eb18f1","signature_type":"Line","deprecated":false,"signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","target":{"file":"src/com/android/nfc/NfcService.java","function":"rediscover"},"digest":{"length":596,"function_hash":"178183139950416214276513024474244395053"},"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70","id":"PUB-A-199291025-5b3ddecd","deprecated":false,"match_only_versions":["13"]},{"target":{"file":"src/com/android/nfc/NfcService.java","function":"dispatchTagEndpoint"},"digest":{"length":2917,"function_hash":"225135728256752818609898632815053692446"},"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70","id":"PUB-A-199291025-5ca28282","signature_type":"Function","deprecated":false,"signature_version":"v1"},{"target":{"file":"src/com/android/nfc/NfcService.java","function":"handleMessage"},"digest":{"length":8575,"function_hash":"157350156200360997835188452343344244994"},"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70","id":"PUB-A-199291025-950bb74f","signature_type":"Function","deprecated":false,"signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","target":{"file":"src/com/android/nfc/NfcService.java","function":"onTagDisconnected"},"digest":{"length":55,"function_hash":"95946657837689939603111401885012982257"},"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70","id":"PUB-A-199291025-cb5bde8e","deprecated":false,"match_only_versions":["13"]},{"target":{"file":"src/com/android/nfc/NfcService.java","function":"setTagUpToDate"},"digest":{"length":184,"function_hash":"42542488920067912225459150232632256623"},"source":"https://android.googlesource.com/platform/packages/apps/Nfc/+/701f997db75412ae1360e2290c7aac68a5105f70","id":"PUB-A-199291025-d3759684","signature_type":"Function","deprecated":false,"signature_version":"v1"}],"types":["ID"],"spl":"2022-12-01","severity":"Moderate"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-199291025.json"}}],"schema_version":"1.7.5"}