{"id":"PUB-A-215212561","details":"In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-215212561","CVE-2022-20205"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2022-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-06-01"}],"affected":[{"package":{"name":"platform/packages/apps/Messaging","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L-next:0"},{"fixed":"12L-next:2022-06-01"}]}],"versions":["12L-next"],"ecosystem_specific":{"spl":"2022-06-01","severity":"Moderate","types":["ID"],"vanir_signatures":[{"signature_version":"v1","match_only_versions":["12L-next"],"digest":{"threshold":0.9,"line_hashes":["55151738822368162832341839954082388316","158532543148131802520662100669517338349","430341620960188749378931978653877775","257116361882594476370450298514782839007"]},"deprecated":false,"signature_type":"Line","id":"PUB-A-215212561-14b8f296","target":{"file":"src/com/android/messaging/util/ImageUtils.java"},"source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/ebc64c5bae620cb67808935b0fb61cf2cfce4a9c"},{"signature_version":"v1","target":{"file":"src/com/android/messaging/util/ImageUtils.java","function":"resizeGifImage"},"digest":{"length":1153,"function_hash":"328102028242482894970860856334176688375"},"deprecated":false,"signature_type":"Function","id":"PUB-A-215212561-542b68f1","match_only_versions":["12L-next"],"source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/ebc64c5bae620cb67808935b0fb61cf2cfce4a9c"},{"signature_version":"v1","signature_type":"Function","digest":{"length":202,"function_hash":"86737825198178567318258606714352033387"},"deprecated":false,"match_only_versions":["12L-next"],"id":"PUB-A-215212561-7fcc2b73","target":{"file":"src/com/android/messaging/util/FileUtil.java","function":"isInPrivateDir"},"source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/ebc64c5bae620cb67808935b0fb61cf2cfce4a9c"},{"signature_version":"v1","match_only_versions":["12L-next"],"digest":{"length":127,"function_hash":"279445365553651897327282062363648628144"},"deprecated":false,"signature_type":"Function","id":"PUB-A-215212561-971e8410","target":{"file":"src/com/android/messaging/util/FileUtil.java","function":"isFileUri"},"source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/ebc64c5bae620cb67808935b0fb61cf2cfce4a9c"},{"signature_version":"v1","target":{"file":"src/com/android/messaging/mmslib/pdu/PduPersister.java"},"digest":{"threshold":0.9,"line_hashes":["301304605707105986568318815528801431508","247194603926222060554680320145895243998","145901796073728064701950275761276492152","6369635545030450401114924997173265369","232426966261262354398890034281368853349","334385709999191821037257413146697906683","98211686701115947148831535440844800138","272619025638548499545829796009713234427","91950206126483064770472477229327269451"]},"deprecated":false,"match_only_versions":["12L-next"],"id":"PUB-A-215212561-b21c21a6","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/ebc64c5bae620cb67808935b0fb61cf2cfce4a9c"},{"signature_version":"v1","match_only_versions":["12L-next"],"digest":{"threshold":0.9,"line_hashes":["278221800015042108510720358144854156099","96926762268128381353059792894218726378","133980779932545692079384517201769998087","165637699960546409601489629862874630445","52500540636834501652623066649234039648","338473651741458288321596832034434836563","221349403753932766943465425292837114063","251803775468755073494165601775336491475"]},"deprecated":false,"target":{"file":"src/com/android/messaging/util/FileUtil.java"},"id":"PUB-A-215212561-bccd8ddc","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/ebc64c5bae620cb67808935b0fb61cf2cfce4a9c"},{"signature_version":"v1","match_only_versions":["12L-next"],"digest":{"length":1122,"function_hash":"129045183642100473667765870766515312170"},"deprecated":false,"target":{"file":"src/com/android/messaging/mmslib/pdu/PduPersister.java","function":"convertUriToPath"},"id":"PUB-A-215212561-c1ef1f80","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/ebc64c5bae620cb67808935b0fb61cf2cfce4a9c"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Messaging/+/ebc64c5bae620cb67808935b0fb61cf2cfce4a9c"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-215212561.json"}},{"package":{"name":"platform/packages/apps/Messaging","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2022-06-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2022-06-01","severity":"Moderate","types":["ID"],"vanir_signatures":[{"signature_version":"v1","match_only_versions":["12L"],"digest":{"length":1122,"function_hash":"129045183642100473667765870766515312170"},"deprecated":false,"target":{"file":"src/com/android/messaging/mmslib/pdu/PduPersister.java","function":"convertUriToPath"},"id":"PUB-A-215212561-140999fa","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/27e27d944b4e923ca9b81e7fdd6744f94cebb508"},{"signature_version":"v1","match_only_versions":["12L"],"digest":{"threshold":0.9,"line_hashes":["55151738822368162832341839954082388316","158532543148131802520662100669517338349","430341620960188749378931978653877775","257116361882594476370450298514782839007"]},"deprecated":false,"target":{"file":"src/com/android/messaging/util/ImageUtils.java"},"id":"PUB-A-215212561-33ce77ba","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/27e27d944b4e923ca9b81e7fdd6744f94cebb508"},{"signature_version":"v1","target":{"file":"src/com/android/messaging/util/FileUtil.java","function":"isInPrivateDir"},"digest":{"length":202,"function_hash":"86737825198178567318258606714352033387"},"deprecated":false,"signature_type":"Function","id":"PUB-A-215212561-3d9c0bb9","match_only_versions":["12L"],"source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/27e27d944b4e923ca9b81e7fdd6744f94cebb508"},{"signature_version":"v1","match_only_versions":["12L"],"digest":{"length":127,"function_hash":"279445365553651897327282062363648628144"},"deprecated":false,"target":{"file":"src/com/android/messaging/util/FileUtil.java","function":"isFileUri"},"id":"PUB-A-215212561-6b29dc16","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/27e27d944b4e923ca9b81e7fdd6744f94cebb508"},{"signature_version":"v1","match_only_versions":["12L"],"digest":{"length":1153,"function_hash":"328102028242482894970860856334176688375"},"deprecated":false,"target":{"file":"src/com/android/messaging/util/ImageUtils.java","function":"resizeGifImage"},"id":"PUB-A-215212561-cb77d132","signature_type":"Function","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/27e27d944b4e923ca9b81e7fdd6744f94cebb508"},{"signature_version":"v1","target":{"file":"src/com/android/messaging/mmslib/pdu/PduPersister.java"},"digest":{"threshold":0.9,"line_hashes":["301304605707105986568318815528801431508","247194603926222060554680320145895243998","145901796073728064701950275761276492152","6369635545030450401114924997173265369","232426966261262354398890034281368853349","334385709999191821037257413146697906683","98211686701115947148831535440844800138","272619025638548499545829796009713234427","91950206126483064770472477229327269451"]},"deprecated":false,"match_only_versions":["12L"],"id":"PUB-A-215212561-cf8e7261","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/27e27d944b4e923ca9b81e7fdd6744f94cebb508"},{"signature_version":"v1","match_only_versions":["12L"],"digest":{"threshold":0.9,"line_hashes":["278221800015042108510720358144854156099","96926762268128381353059792894218726378","133980779932545692079384517201769998087","165637699960546409601489629862874630445","52500540636834501652623066649234039648","338473651741458288321596832034434836563","221349403753932766943465425292837114063","251803775468755073494165601775336491475"]},"deprecated":false,"target":{"file":"src/com/android/messaging/util/FileUtil.java"},"id":"PUB-A-215212561-fce40473","signature_type":"Line","source":"https://android.googlesource.com/platform/packages/apps/Messaging/+/27e27d944b4e923ca9b81e7fdd6744f94cebb508"}],"fixes":["https://android.googlesource.com/platform/packages/apps/Messaging/+/27e27d944b4e923ca9b81e7fdd6744f94cebb508"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-215212561.json"}}],"schema_version":"1.7.5"}