{"id":"PUB-A-224770183","details":"In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-224770183","CVE-2022-42535"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/561e28af0c3baf6c25c42f7383411bee79139f41"}],"affected":[{"package":{"name":"platform/packages/providers/TelephonyProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"digest":{"line_hashes":["175278434493877219041305268878872093326","27272561965854949146123458815165972263","223552482003786354991201828198178774298","87875702481257780381372651189034741421","27398525298253817439086317880426186214","247097726139767068152210776798215643129","42973832947563651813844174996399787973","243705358534627401397731811153310912311","190521588167200224755839801483910998614","38947201479845264073759646330827678555"],"threshold":0.9},"id":"PUB-A-224770183-4a67ded2","match_only_versions":["13"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/561e28af0c3baf6c25c42f7383411bee79139f41","target":{"file":"src/com/android/providers/telephony/MmsSmsProvider.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/561e28af0c3baf6c25c42f7383411bee79139f41","target":{"file":"src/com/android/providers/telephony/MmsSmsProvider.java","function":"query"},"deprecated":false,"digest":{"function_hash":"24073405600031326241509208613221419142","length":5084},"id":"PUB-A-224770183-a06dfb12"}],"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/561e28af0c3baf6c25c42f7383411bee79139f41"],"severity":"Moderate","spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-224770183.json"}}],"schema_version":"1.9.0"}