{"id":"PUB-A-235822336", "published":"2022-12-01T00:00:00Z", "modified":"2026-05-01T15:24:27.653932157Z", "aliases":["CVE-2022-20510", "A-235822336"], "details":"In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy of other users due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2022-12-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238"], "severity":"Moderate", "spl":"2022-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"23323229106036744297971719515141463109", "length":515}, "id":"PUB-A-235822336-23258692", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"getNearbyNotificationStreamingPolicy"}}, {"deprecated":false, "digest":{"function_hash":"80280129656514903824163235453787461465", "length":506}, "id":"PUB-A-235822336-302f1d11", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"getNearbyAppStreamingPolicy"}}, {"deprecated":false, "digest":{"line_hashes":["119405627220343643703575800912099104374", "305904457889989786555420660248516047723", "302703526076072942604611378099633220393", "149655663574408730792046751362137342101", "119405627220343643703575800912099104374", "305904457889989786555420660248516047723", "302703526076072942604611378099633220393", "149655663574408730792046751362137342101"], "threshold":0.9}, "id":"PUB-A-235822336-7f9edbf1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/731ee1a3575b7374bde9ae8957db07ba0f0be238", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-12-01"}]}