CVE-2022-26471: High severity Google Android vulnerability
In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2022-10-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS07319121
Event History
Frequently Asked Questions
What is the severity of CVE-2022-26471?
The severity of CVE-2022-26471 is considered high due to the potential for local escalation of privilege without requiring additional execution privileges.
How do I fix CVE-2022-26471?
To fix CVE-2022-26471, you should apply the security patch identified as ALPS07319121 that addresses this vulnerability.
Who is affected by CVE-2022-26471?
CVE-2022-26471 affects devices running Android 12.0 and potentially specific telephony implementations.
Can CVE-2022-26471 be exploited without user interaction?
Yes, CVE-2022-26471 can be exploited without any user interaction, making it a significant risk.
What is a parcel format mismatch in CVE-2022-26471?
A parcel format mismatch in CVE-2022-26471 refers to an error in how data is packaged for telephony functions, leading to potential privilege escalation.