CVE-2022-42535
published 2022-12-16CVE-2022-42535: In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with…
PriorityP424medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.22%
11.8th percentile
In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224770183
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| platform | packages_providers_telephonyprovider | >= 13:0 < 13:2022-12-01 | 13:2022-12-01 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Android 13.0 MmsSmsProvider.java query information disclosure (A-224770183 / EUVD-2022-45602)
vuldb·2026-08-18·CVSS 5.5
CVE-2022-42535 [MEDIUM] Google Android 13.0 MmsSmsProvider.java query information disclosure (A-224770183 / EUVD-2022-45602)
A vulnerability described as problematic has been identified in Google Android 13.0. This issue affects the function Query of the file MmsSmsProvider.java. Executing a manipulation can lead to information disclosure.
This vulnerability appears as CVE-2022-42535. The attack requires local access. There is no available exploit.
Applying a patch is advised to resolve this issue.
GHSA
GHSA-45qq-chvf-7cwf: In a query in MmsSmsProvider
ghsa_unreviewed·2022-12-21
CVE-2022-42535 [MEDIUM] CWE-89 GHSA-45qq-chvf-7cwf: In a query in MmsSmsProvider
In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224770183
OSV
CVE-2022-42535: In a query in MmsSmsProvider
osv·2022-12-01
CVE-2022-42535 CVE-2022-42535: In a query in MmsSmsProvider
In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-16
Published