ASB-A-222473855
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/ASB-A-222473855.json
- JSON Data
- https://api.osv.dev/v1/vulns/ASB-A-222473855
- Aliases
-
- A-222473855
- CVE-2022-20352
- Published
- 2022-08-01T00:00:00Z
- Modified
- 2026-04-30T15:48:46.890647Z
- Summary
- [none]
- Details
-
In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- References
Affected packages
Android / platform/frameworks/base
Package
Ecosystem specific
{
"severity": "High",
"spl": "2022-08-01",
"vanir_signatures": [
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"328193556248782951641790205605243217679",
"79217138068238015332246817556987679606",
"36064791564867081232686217098038219702",
"5784399782363552574594590744373558609",
"336972343672231522499555034970395487447",
"277489103222861791030479602005192860012",
"252406015658564531537233619625780896708",
"304948244687256552779491518059006470202",
"327978033885819513148177202686636115912",
"54047258394796158275613986573117815311",
"80826063658136628057348524678411856397"
],
"threshold": 0.9
},
"id": "ASB-A-222473855-514972bf",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/5b376bc9fd51e1a39fd5e1bd6a698c7cb2b9b3d4",
"target": {
"file": "services/core/java/com/android/server/location/LocationManagerService.java"
}
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/5b376bc9fd51e1a39fd5e1bd6a698c7cb2b9b3d4"
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"severity": "High",
"spl": "2022-08-01",
"vanir_signatures": [
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"328193556248782951641790205605243217679",
"79217138068238015332246817556987679606",
"36064791564867081232686217098038219702",
"5784399782363552574594590744373558609",
"336972343672231522499555034970395487447",
"277489103222861791030479602005192860012",
"252406015658564531537233619625780896708",
"304948244687256552779491518059006470202",
"327978033885819513148177202686636115912",
"54047258394796158275613986573117815311",
"80826063658136628057348524678411856397"
],
"threshold": 0.9
},
"id": "ASB-A-222473855-6bcf97bb",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/d1e6b59356214115c28ede53f48279b5d0f44b67",
"target": {
"file": "services/core/java/com/android/server/location/LocationManagerService.java"
}
}
],
"types": [
"ID"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/d1e6b59356214115c28ede53f48279b5d0f44b67"
]
}