CVE-2022-20458

The logs of sensitive information PII or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotification.getKey could contain sensitive information. However, CarNotificationListener.java, it prints out the StatusBarNotification.getKey directly in logs, whic...

CVE-2022-20458

creationtimestamp| type| source ---|---|--- 2023-01-27 00:34:02+00:00| seen| https://t.me/cibsecurity/56949 2025-04-02 14:34:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10093...

CVE-2022-20458

The logs of sensitive information PII or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotification.getKey could contain sensitive information. However, CarNotificationListener.java, it prints out the StatusBarNotification.getKey directly in logs, whic...

CVE-2022-20458

The logs of sensitive information PII or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotification.getKey could contain sensitive information. However, CarNotificationListener.java, it prints out the StatusBarNotification.getKey directly in logs, whic...

CVE-2022-20458

CVE-2022-20458 affects Android (Android-12L). The vulnerability is an information disclosure in logs: StatusBarNotification.getKey() may print sensitive data (PII or hardware identifiers) via CarNotificationListener.java in Android "user" builds, exposing user account names. Affected component ap...