CVE-2022-20358

CVE-2022-20358 affects Android 10–12 (including 12L) and is tied to a flaw in AbstractThreadedSyncAdapter.startSync where a missing permission check could allow access to protected content in content providers. This is a local information-disclosure vulnerability with user privileges required, an...