{"id":"PUB-A-235822336","details":"In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy of other users due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-235822336","CVE-2022-20510"],"modified":"2026-09-22T15:22:15.314525410Z","published":"2022-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2022-12-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2022-12-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238"],"severity":"Moderate","spl":"2022-12-01","types":["ID"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"getNearbyNotificationStreamingPolicy"},"deprecated":false,"digest":{"length":515,"function_hash":"23323229106036744297971719515141463109"},"id":"PUB-A-235822336-23258692","match_only_versions":["13"]},{"digest":{"function_hash":"80280129656514903824163235453787461465","length":506},"id":"PUB-A-235822336-302f1d11","match_only_versions":["13"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238","target":{"function":"getNearbyAppStreamingPolicy","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["119405627220343643703575800912099104374","305904457889989786555420660248516047723","302703526076072942604611378099633220393","149655663574408730792046751362137342101","119405627220343643703575800912099104374","305904457889989786555420660248516047723","302703526076072942604611378099633220393","149655663574408730792046751362137342101"]},"id":"PUB-A-235822336-7f9edbf1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/PUB-A-235822336.json"}}],"schema_version":"1.9.0"}