{"id":"PUB-A-235821829","details":"In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-235821829","CVE-2022-20511"],"modified":"2026-09-21T16:00:45.521740994Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"23323229106036744297971719515141463109","length":515},"id":"PUB-A-235821829-23258692","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"getNearbyNotificationStreamingPolicy"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238","target":{"function":"getNearbyAppStreamingPolicy","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"function_hash":"80280129656514903824163235453787461465","length":506},"id":"PUB-A-235821829-302f1d11","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1"},{"digest":{"threshold":0.9,"line_hashes":["119405627220343643703575800912099104374","305904457889989786555420660248516047723","302703526076072942604611378099633220393","149655663574408730792046751362137342101","119405627220343643703575800912099104374","305904457889989786555420660248516047723","302703526076072942604611378099633220393","149655663574408730792046751362137342101"]},"id":"PUB-A-235821829-7f9edbf1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238"],"severity":"Moderate","spl":"2022-12-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-235821829.json"}}],"schema_version":"1.9.0"}