Android (AOSP) TV Provider SQL Injection in Query Projection Parameter (CVE-2019-2211)