CVE-2022-20305

In ContentService, there is a possible disclosure of available account types due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2022-20305

CVE-2022-20305 affects Android 13 ContentService. The issue is a missing permission check that allows a local attacker to disclose information about available account types. Exploitation requires user execution privileges but does not require user interaction. The CVSSv3.1 vector indicates a Loca...