{"id":"PUB-A-229742768","details":"In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package name due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-229742768","CVE-2022-20525"],"modified":"2026-09-28T15:29:43.358241862Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/services/Telephony/+/7f6575528f222e6b56b51ed07a02a53ca9b65ec9"}],"affected":[{"package":{"name":"platform/packages/services/Telephony","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"src/com/android/phone/PhoneInterfaceManager.java"},"deprecated":false,"digest":{"line_hashes":["196627389734480781337006352051271306718","176199336712474822964219730830404357951","100018591607891501078266815945128062618","283347072164868859287192497592244016897","212212967777264311339447439895338260217"],"threshold":0.9},"id":"PUB-A-229742768-974bc603","match_only_versions":["13"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/7f6575528f222e6b56b51ed07a02a53ca9b65ec9"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/Telephony/+/7f6575528f222e6b56b51ed07a02a53ca9b65ec9","target":{"file":"src/com/android/phone/PhoneInterfaceManager.java","function":"enforceVisualVoicemailPackage"},"deprecated":false,"digest":{"function_hash":"164277845087912398136043904496309705968","length":470},"id":"PUB-A-229742768-f6fac92b","match_only_versions":["13"]}],"fixes":["https://android.googlesource.com/platform/packages/services/Telephony/+/7f6575528f222e6b56b51ed07a02a53ca9b65ec9"],"severity":"Moderate","spl":"2022-12-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-229742768.json"}}],"schema_version":"1.9.0"}