{"id":"ASB-A-210118427", "published":"2022-05-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2022-20115", "A-210118427"], "details":"In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12:0"}, {"fixed":"12:2022-05-01"}]}], "versions":["12"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce"], "severity":"High", "spl":"2022-05-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"249297962095061718371616802384786145059", "length":993}, "id":"ASB-A-210118427-c6c4cec3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce", "target":{"file":"services/core/java/com/android/server/TelephonyRegistry.java", "function":"broadcastServiceStateChanged"}}, {"deprecated":false, "digest":{"line_hashes":["41512693347628021644673611904772891798", "305593943601676424061356763155554660880", "5233767736275083551744175885447926968", "22057779305787612167936943318282341793", "76183226155151789197330749828201335874", "232097927873296135195575221555327465006", "40547586229062789643947509367638884460", "73351098024884403620443002505238231441", "309328896255330269237202712269234959543"], "threshold":0.9}, "id":"ASB-A-210118427-dd6b0f4f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce", "target":{"file":"services/core/java/com/android/server/TelephonyRegistry.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2022-05-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce"], "severity":"High", "spl":"2022-05-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["41512693347628021644673611904772891798", "305593943601676424061356763155554660880", "5233767736275083551744175885447926968", "22057779305787612167936943318282341793", "76183226155151789197330749828201335874", "232097927873296135195575221555327465006", "40547586229062789643947509367638884460", "73351098024884403620443002505238231441", "309328896255330269237202712269234959543"], "threshold":0.9}, "id":"ASB-A-210118427-81da6be0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce", "target":{"file":"services/core/java/com/android/server/TelephonyRegistry.java"}}, {"deprecated":false, "digest":{"function_hash":"249297962095061718371616802384786145059", "length":993}, "id":"ASB-A-210118427-b47dc37d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8bfc53154863752fe03d6374ed6876e8807167ce", "target":{"file":"services/core/java/com/android/server/TelephonyRegistry.java", "function":"broadcastServiceStateChanged"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-05-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/abb41637225c95d5530bff275531a446be66a18c"}]}