{"id":"PUB-A-224770203","details":"In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-224770203","CVE-2022-20518"],"modified":"2026-05-01T15:24:27.653932Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/561e28af0c3baf6c25c42f7383411bee79139f41"}],"affected":[{"package":{"name":"platform/packages/providers/TelephonyProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2022-12-01","severity":"Moderate","types":["ID"],"fixes":["https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/561e28af0c3baf6c25c42f7383411bee79139f41"],"vanir_signatures":[{"target":{"file":"src/com/android/providers/telephony/MmsSmsProvider.java"},"match_only_versions":["13"],"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/561e28af0c3baf6c25c42f7383411bee79139f41","signature_type":"Line","id":"PUB-A-224770203-4a67ded2","digest":{"line_hashes":["175278434493877219041305268878872093326","27272561965854949146123458815165972263","223552482003786354991201828198178774298","87875702481257780381372651189034741421","27398525298253817439086317880426186214","247097726139767068152210776798215643129","42973832947563651813844174996399787973","243705358534627401397731811153310912311","190521588167200224755839801483910998614","38947201479845264073759646330827678555"],"threshold":0.9},"deprecated":false,"signature_version":"v1"},{"target":{"function":"query","file":"src/com/android/providers/telephony/MmsSmsProvider.java"},"digest":{"length":5084,"function_hash":"24073405600031326241509208613221419142"},"source":"https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/561e28af0c3baf6c25c42f7383411bee79139f41","signature_type":"Function","deprecated":false,"signature_version":"v1","id":"PUB-A-224770203-a06dfb12"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-224770203.json"}}],"schema_version":"1.7.5"}