CVE-2022-20358

creationtimestamp| type| source ---|---|--- 2025-09-03 19:25:55+00:00| seen| Telegram/oe2j5uK5qxIqBNYvXuE5IpxQRhF2X8QBxsxo601hp5bTIU...

CVE-2022-20358

In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for...

CVE-2022-20358

CVE-2022-20358 affects Android 10–12 (including 12L) and is tied to a flaw in AbstractThreadedSyncAdapter.startSync where a missing permission check could allow access to protected content in content providers. This is a local information-disclosure vulnerability with user privileges required, an...

CVE-2022-20358

In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for...