CVE-2022-20538

creationtimestamp| type| source ---|---|--- 2025-04-18 15:59:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12480...

CVE-2022-20538

In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

CVE-2022-20538

Summary: CVE-2022-20538 affects Android 13 in the getSmsRoleHolder path of RoleService.java. A side-channel information disclosure can let an attacker determine if an app is installed without query permissions, enabling local information disclosure with no extra execution privileges and no user i...