CVE-2022-20358

A missing permission check in the startSync method of AbstractThreadedSyncAdapter.java allows unauthorized access to protected content of content providers. This vulnerability affects Android versions Android-10 , Android-11 , Android-12 , and Android-12L . An attacker with User execution privile...

CVE-2022-20358: Missing Authorization

In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for...