ASB-A-210118427

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-210118427.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-210118427

Aliases

A-210118427
CVE-2022-20115

Published

2022-05-01T00:00:00Z

Modified

2026-05-01T15:24:27.653932Z

Summary

[none]

Details

In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

12:0

Fixed

12:2022-05-01

Affected versions

Other

Ecosystem specific

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce"
    ],
    "severity": "High",
    "spl": "2022-05-01",
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-210118427-c6c4cec3",
            "digest": {
                "length": 993.0,
                "function_hash": "249297962095061718371616802384786145059"
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce",
            "signature_type": "Function",
            "target": {
                "file": "services/core/java/com/android/server/TelephonyRegistry.java",
                "function": "broadcastServiceStateChanged"
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "ASB-A-210118427-dd6b0f4f",
            "digest": {
                "line_hashes": [
                    "41512693347628021644673611904772891798",
                    "305593943601676424061356763155554660880",
                    "5233767736275083551744175885447926968",
                    "22057779305787612167936943318282341793",
                    "76183226155151789197330749828201335874",
                    "232097927873296135195575221555327465006",
                    "40547586229062789643947509367638884460",
                    "73351098024884403620443002505238231441",
                    "309328896255330269237202712269234959543"
                ],
                "threshold": 0.9
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce",
            "signature_type": "Line",
            "target": {
                "file": "services/core/java/com/android/server/TelephonyRegistry.java"
            }
        }
    ],
    "types": [
        "ID"
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/ASB-A-210118427.json"