{"id":"PUB-A-231585645","details":"In strings.xml, there is a possible permission bypass due to a misleading string. This could lead to remote information disclosure of call logs with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-231585645","CVE-2022-20530"],"modified":"2026-04-03T15:37:31.002635Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/8b83094ae3080495f6f95d0a1549ccc5594b5354"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8b83094ae3080495f6f95d0a1549ccc5594b5354"],"severity":"Moderate","types":["ID"],"spl":"2022-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-231585645.json"}}],"schema_version":"1.7.5"}