CVE-2022-21764: Medium severity Google Android vulnerability
In telecom service, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2022-07-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS07044717
Event History
Frequently Asked Questions
What is the severity of CVE-2022-21764?
The severity of CVE-2022-21764 is high.
How does CVE-2022-21764 impact telecom service?
CVE-2022-21764 can lead to information disclosure due to a missing permission check in telecom service.
Is user interaction required to exploit CVE-2022-21764?
No, user interaction is not needed for the exploitation of CVE-2022-21764.
Which versions of Google Android are affected by CVE-2022-21764?
CVE-2022-21764 affects Google Android versions 10.0, 11.0, and 12.0.
How can I fix CVE-2022-21764?
To fix CVE-2022-21764, apply the provided patch ID: ALPS07044717.