CVE-2022-20518
published 2022-12-16CVE-2022-20518: In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with…
PriorityP424medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.21%
11.3th percentile
In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224770203
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| platform | packages_providers_telephonyprovider | >= 13:0 < 13:2022-12-01 | 13:2022-12-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android 13.0 MmsSmsProvider.java query information disclosure (A-224770203 / EUVD-2022-25778)
vuldb·2026-04-20·CVSS 5.5
CVE-2022-20518 [MEDIUM] Google Android 13.0 MmsSmsProvider.java query information disclosure (A-224770203 / EUVD-2022-25778)
A vulnerability marked as problematic has been reported in Google Android 13.0. This affects the function Query of the file MmsSmsProvider.java. This manipulation causes information disclosure.
This vulnerability is handled as CVE-2022-20518. It is possible to launch the attack on the local host. There is not any exploit available.
It is recommended to apply a patch to fix this issue.
GHSA
GHSA-2267-87gq-vw4p: In query of MmsSmsProvider
ghsa_unreviewed·2022-12-20
CVE-2022-20518 [MEDIUM] CWE-89 GHSA-2267-87gq-vw4p: In query of MmsSmsProvider
In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224770203
OSV
CVE-2022-20518: In query of MmsSmsProvider
osv·2022-12-01
CVE-2022-20518 CVE-2022-20518: In query of MmsSmsProvider
In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-49845 kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization
bugzilla·2025-05-01·CVSS 5.5
CVE-2022-49845 [MEDIUM] CVE-2022-49845 kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization
CVE-2022-49845 kernel: can: j1939: j1939_send_one(): fix missing CAN header initialization
In the Linux kernel, the following vulnerability has been resolved:
can: j1939: j1939_send_one(): fix missing CAN header initialization
The read access to struct canxl_frame::len inside of a j1939 created
skbuff revealed a missing initialization of reserved and later filled
elements in struct can_frame.
This patch initializes the 8 byte CAN header with zero.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025050141-CVE-2022-49845-2a75@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:20518 https://access.redhat.com/errata/RHSA-2025:20518
Bugzilla
CVE-2022-49432 kernel: powerpc/xics: fix refcount leak in icp_opal_init()
bugzilla·2025-02-26·CVSS 5.5
CVE-2022-49432 [MEDIUM] CVE-2022-49432 kernel: powerpc/xics: fix refcount leak in icp_opal_init()
CVE-2022-49432 kernel: powerpc/xics: fix refcount leak in icp_opal_init()
In the Linux kernel, the following vulnerability has been resolved:
powerpc/xics: fix refcount leak in icp_opal_init()
The of_find_compatible_node() function returns a node pointer with
refcount incremented, use of_node_put() on it when done.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022656-CVE-2022-49432-12c6@gregkh/T
---
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022656-CVE-2022-49432-12c6@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:20518 https://access.redhat.com/errata/RHSA-2025:20518
Bugzilla
CVE-2022-49672 kernel: net: tun: unlink NAPI from device on destruction
bugzilla·2025-02-26·CVSS 5.5
CVE-2022-49672 [MEDIUM] CVE-2022-49672 kernel: net: tun: unlink NAPI from device on destruction
CVE-2022-49672 kernel: net: tun: unlink NAPI from device on destruction
In the Linux kernel, the following vulnerability has been resolved:
net: tun: unlink NAPI from device on destruction
Syzbot found a race between tun file and device destruction.
NAPIs live in struct tun_file which can get destroyed before
the netdev so we have to del them explicitly. The current
code is missing deleting the NAPI if the queue was detached
first.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022624-CVE-2022-49672-e5ec@gregkh/T
---
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022624-CVE-2022-49672-e5ec@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:20518 https://access.redhat.com
Bugzilla
CVE-2022-49437 kernel: powerpc/xive: Fix refcount leak in xive_spapr_init
bugzilla·2025-02-26·CVSS 5.5
CVE-2022-49437 [MEDIUM] CVE-2022-49437 kernel: powerpc/xive: Fix refcount leak in xive_spapr_init
CVE-2022-49437 kernel: powerpc/xive: Fix refcount leak in xive_spapr_init
In the Linux kernel, the following vulnerability has been resolved:
powerpc/xive: Fix refcount leak in xive_spapr_init
of_find_compatible_node() returns a node pointer with refcount
incremented, we should use of_node_put() on it when done.
Add missing of_node_put() to avoid refcount leak.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022657-CVE-2022-49437-7624@gregkh/T
---
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022657-CVE-2022-49437-7624@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:20518 https://access.redhat.com/errata/RHSA-2025:20518
Bugzilla
CVE-2022-49627 kernel: ima: Fix potential memory leak in ima_init_crypto()
bugzilla·2025-02-26·CVSS 5.5
CVE-2022-49627 [MEDIUM] CVE-2022-49627 kernel: ima: Fix potential memory leak in ima_init_crypto()
CVE-2022-49627 kernel: ima: Fix potential memory leak in ima_init_crypto()
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix potential memory leak in ima_init_crypto()
On failure to allocate the SHA1 tfm, IMA fails to initialize and exits
without freeing the ima_algo_array. Add the missing kfree() for
ima_algo_array to avoid the potential memory leak.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022616-CVE-2022-49627-ec2b@gregkh/T
---
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022616-CVE-2022-49627-ec2b@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:20518 https://access.redhat.com/errata/RHSA-2025:20518
Bugzilla
CVE-2022-49657 kernel: usbnet: fix memory leak in error case
bugzilla·2025-02-26·CVSS 5.5
CVE-2022-49657 [MEDIUM] CVE-2022-49657 kernel: usbnet: fix memory leak in error case
CVE-2022-49657 kernel: usbnet: fix memory leak in error case
In the Linux kernel, the following vulnerability has been resolved:
usbnet: fix memory leak in error case
usbnet_write_cmd_async() mixed up which buffers
need to be freed in which error case.
v2: add Fixes tag
v3: fix uninitialized buf pointer
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022621-CVE-2022-49657-0cbf@gregkh/T
---
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022621-CVE-2022-49657-0cbf@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:20518 https://access.redhat.com/errata/RHSA-2025:20518
Bugzilla
CVE-2022-49643 kernel: ima: Fix a potential integer overflow in ima_appraise_measurement
bugzilla·2025-02-26·CVSS 5.5
CVE-2022-49643 [MEDIUM] CVE-2022-49643 kernel: ima: Fix a potential integer overflow in ima_appraise_measurement
CVE-2022-49643 kernel: ima: Fix a potential integer overflow in ima_appraise_measurement
In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in ima_appraise_measurement
When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be
negative, which may cause the integer overflow problem.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022619-CVE-2022-49643-ae05@gregkh/T
---
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025022619-CVE-2022-49643-ae05@gregkh/T
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2025:20518 https://access.redhat.com/errata/RHSA-2025:20518
2022-12-16
Published