{"id":"ASB-A-203229608", "published":"2022-08-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2022-20358", "A-203229608"], "details":"In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2022-08-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"], "severity":"High", "spl":"2022-08-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"23096037474672351052542667682054836969", "length":189}, "id":"ASB-A-203229608-01a9064b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"onUnsyncableAccount"}}, {"deprecated":false, "digest":{"line_hashes":["322400280918135422706966235496911822283", "254498682045391772804932203699266630890", "179276403088554147119883537526889642889", "282014528196759218477197451146887462406", "65900348616326605297043079686785056953", "215083058926083630847961054012045150546", "106079145532905219669608228690671274802", "283822823360417186884813107879533168484", "125989896934915065894894688464265918803", "205759945961187433774754748926977232987", "84262161981391449687274516786370733663", "46959678495744431603609192445435028763", "46541165844700443694768212791724736018", "209781946595908064742536814629121429047", "60169708086742002015782174066392747414", "190552234122100859095967742255409600208", "43128430397075442698815650927709577097", "209443256192360575367099289505881979864", "262410595781490426960587823616748873998", "194164563629677825341209254574691101076", "238962504983600306593283541589522584948", "197659230500706096526867334507135010744", "133130405312019099252778147057515651104", "143329196078543705119238900982267278322"], "threshold":0.9}, "id":"ASB-A-203229608-2cc41428", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"}}, {"deprecated":false, "digest":{"function_hash":"15657221728455951155093637392133169178", "length":1275}, "id":"ASB-A-203229608-442f60b9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"startSync"}}, {"deprecated":false, "digest":{"function_hash":"159351572810310767380620140586165721701", "length":769}, "id":"ASB-A-203229608-c4f6c6c6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"cancelSync"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2022-08-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"], "severity":"High", "spl":"2022-08-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"23096037474672351052542667682054836969", "length":189}, "id":"ASB-A-203229608-03ac4371", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"onUnsyncableAccount"}}, {"deprecated":false, "digest":{"function_hash":"159351572810310767380620140586165721701", "length":769}, "id":"ASB-A-203229608-18979a87", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"cancelSync"}}, {"deprecated":false, "digest":{"line_hashes":["322400280918135422706966235496911822283", "254498682045391772804932203699266630890", "179276403088554147119883537526889642889", "282014528196759218477197451146887462406", "65900348616326605297043079686785056953", "215083058926083630847961054012045150546", "106079145532905219669608228690671274802", "283822823360417186884813107879533168484", "125989896934915065894894688464265918803", "205759945961187433774754748926977232987", "84262161981391449687274516786370733663", "46959678495744431603609192445435028763", "46541165844700443694768212791724736018", "209781946595908064742536814629121429047", "60169708086742002015782174066392747414", "190552234122100859095967742255409600208", "43128430397075442698815650927709577097", "209443256192360575367099289505881979864", "262410595781490426960587823616748873998", "194164563629677825341209254574691101076", "238962504983600306593283541589522584948", "197659230500706096526867334507135010744", "133130405312019099252778147057515651104", "143329196078543705119238900982267278322"], "threshold":0.9}, "id":"ASB-A-203229608-535229ff", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"}}, {"deprecated":false, "digest":{"function_hash":"15657221728455951155093637392133169178", "length":1275}, "id":"ASB-A-203229608-e8a5c199", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"startSync"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2022-08-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"], "severity":"High", "spl":"2022-08-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"23096037474672351052542667682054836969", "length":189}, "id":"ASB-A-203229608-025f5fca", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"onUnsyncableAccount"}}, {"deprecated":false, "digest":{"function_hash":"159351572810310767380620140586165721701", "length":769}, "id":"ASB-A-203229608-5ce98eab", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"cancelSync"}}, {"deprecated":false, "digest":{"line_hashes":["322400280918135422706966235496911822283", "254498682045391772804932203699266630890", "179276403088554147119883537526889642889", "282014528196759218477197451146887462406", "65900348616326605297043079686785056953", "215083058926083630847961054012045150546", "106079145532905219669608228690671274802", "283822823360417186884813107879533168484", "125989896934915065894894688464265918803", "205759945961187433774754748926977232987", "84262161981391449687274516786370733663", "46959678495744431603609192445435028763", "46541165844700443694768212791724736018", "209781946595908064742536814629121429047", "60169708086742002015782174066392747414", "190552234122100859095967742255409600208", "43128430397075442698815650927709577097", "209443256192360575367099289505881979864", "262410595781490426960587823616748873998", "194164563629677825341209254574691101076", "238962504983600306593283541589522584948", "197659230500706096526867334507135010744", "133130405312019099252778147057515651104", "143329196078543705119238900982267278322"], "threshold":0.9}, "id":"ASB-A-203229608-8fb7a56a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"}}, {"deprecated":false, "digest":{"function_hash":"15657221728455951155093637392133169178", "length":1275}, "id":"ASB-A-203229608-f59ded9a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"startSync"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2022-08-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff"], "severity":"High", "spl":"2022-08-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["322400280918135422706966235496911822283", "254498682045391772804932203699266630890", "179276403088554147119883537526889642889", "282014528196759218477197451146887462406", "65900348616326605297043079686785056953", "215083058926083630847961054012045150546", "106079145532905219669608228690671274802", "283822823360417186884813107879533168484", "125989896934915065894894688464265918803", "205759945961187433774754748926977232987", "84262161981391449687274516786370733663", "46959678495744431603609192445435028763", "46541165844700443694768212791724736018", "209781946595908064742536814629121429047", "60169708086742002015782174066392747414", "190552234122100859095967742255409600208", "43128430397075442698815650927709577097", "209443256192360575367099289505881979864", "262410595781490426960587823616748873998", "194164563629677825341209254574691101076", "238962504983600306593283541589522584948", "197659230500706096526867334507135010744", "133130405312019099252778147057515651104", "143329196078543705119238900982267278322"], "threshold":0.9}, "id":"ASB-A-203229608-9289466b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java"}}, {"deprecated":false, "digest":{"function_hash":"15657221728455951155093637392133169178", "length":1275}, "id":"ASB-A-203229608-aac5768d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"startSync"}}, {"deprecated":false, "digest":{"function_hash":"23096037474672351052542667682054836969", "length":189}, "id":"ASB-A-203229608-f4e7d50b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"onUnsyncableAccount"}}, {"deprecated":false, "digest":{"function_hash":"159351572810310767380620140586165721701", "length":769}, "id":"ASB-A-203229608-fcd70db9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7d1397a54475ed7fee632339ef7c60b432f0fbff", "target":{"file":"core/java/android/content/AbstractThreadedSyncAdapter.java", "function":"cancelSync"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-08-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/e86156084bcf92b6160577f48b5b2dd584349e2e"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/58270527d11ac7e5f07d337a402d8edf046a63ee"}]}