CVE-2022-20505: Path Traversal in CallLogProvider - Delete Use Case
Summary
CVE-2022-20505: In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. Affects platform/packages/providers/ContactsProvider versions >= 13:0, < 13:2022-12-01. Fixed in 13:2022-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The CallLogProvider is a component of the ContactsProvider package in the Android ecosystem. It is responsible for managing call log data and providing access to it. The vulnerability in question allows for path traversal, which means an attacker can bypass permissions and access files outside the intended directory. This vulnerability requires local execution privileges and can lead to privilege escalation without user interaction.
Vulnerability Detail
The vulnerability exists in the 'openFile' function of the CallLogProvider.java file. Due to a path traversal error, an attacker can manipulate the file path and access files outside the intended directory. This can result in unauthorized access to sensitive data or the execution of arbitrary code with elevated privileges. The vulnerability was introduced in Android 13 and was fixed on December 1, 2022.
How To Fix
Minimum fixed version
13:2022-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix to ensure the security of the system.
Conclusion
The CallLogProvider in the ContactsProvider package of Android is vulnerable to a path traversal issue. This vulnerability allows for unauthorized access to files outside the intended directory, potentially leading to the compromise of sensitive data or the execution of arbitrary code with elevated privileges. It is crucial to apply the provided fix to mitigate this vulnerability.
See every vulnerability recorded for platform/packages/providers/ContactsProvider →
FAQ
The vulnerability allows an attacker to bypass permissions and access files outside the intended directory. This can lead to unauthorized access to sensitive data or the execution of arbitrary code with elevated privileges.
No, user interaction is not needed for exploitation of this vulnerability.
Android 13 is affected by this vulnerability. The fix was released on December 1, 2022.
The severity of this vulnerability is considered moderate.
There are no known instances of this vulnerability being exploited in the wild.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/providers/ContactsProvider.
