{"id":"PUB-A-220737634", "published":"2022-06-01T00:00:00Z", "modified":"2026-05-22T15:55:21.353668239Z", "aliases":["CVE-2022-20206", "A-220737634"], "details":"In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead to local information disclosure about enabled notification listeners with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L-next:0"}, {"fixed":"12L-next:2022-06-01"}]}], "versions":["12L-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8ea87a68775662cdeb9e6786e95da48cdfe6d792"], "severity":"Moderate", "spl":"2022-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"74169396570657966458974536996553015934", "length":325}, "id":"PUB-A-220737634-86010cb6", "match_only_versions":["12L-next"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ea87a68775662cdeb9e6786e95da48cdfe6d792", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"setPackageOrComponentEnabled"}}, {"deprecated":false, "digest":{"line_hashes":["139727855134190292215210315809558621887", "328184728541673823851081058804331044837", "28306553086583300279790545081634269497", "212366489182376849850214613363801528837", "216324127212490409410530310274160899549", "337765672091484012893070019445469805132", "216031990540261583274555498325510460896"], "threshold":0.9}, "id":"PUB-A-220737634-e6d499aa", "match_only_versions":["12L-next"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/8ea87a68775662cdeb9e6786e95da48cdfe6d792", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"12L:0"}, {"fixed":"12L:2022-06-01"}]}], "versions":["12L"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/89f6161d7a9fc8860b1363f16fb33f924e3cf760"], "severity":"Moderate", "spl":"2022-06-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"74169396570657966458974536996553015934", "length":325}, "id":"PUB-A-220737634-6cf30ba0", "match_only_versions":["12L"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/89f6161d7a9fc8860b1363f16fb33f924e3cf760", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"setPackageOrComponentEnabled"}}, {"deprecated":false, "digest":{"line_hashes":["139727855134190292215210315809558621887", "328184728541673823851081058804331044837", "28306553086583300279790545081634269497", "212366489182376849850214613363801528837", "216324127212490409410530310274160899549", "337765672091484012893070019445469805132", "216031990540261583274555498325510460896"], "threshold":0.9}, "id":"PUB-A-220737634-95bae6e8", "match_only_versions":["12L"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/89f6161d7a9fc8860b1363f16fb33f924e3cf760", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-06-01"}]}