CVE-2022-20353

CVE-2022-20353 is an Android Media Framework issue affecting Android 10–12/12L, described as an information disclosure vulnerability in the onSaveRingtone path of DefaultRingtonePreference.java . The root cause is improper input validation leading to an inappropriate file read, enabling local inf...