CVE-2022-26472: High severity Google Android vulnerability
In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319095; Issue ID: ALPS07319095.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS07319095
Event History
Frequently Asked Questions
What is the severity of CVE-2022-26472?
CVE-2022-26472 has been classified as a critical vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2022-26472?
The fix for CVE-2022-26472 is included in the patch identified by ALPS07319095.
Which versions of Android are affected by CVE-2022-26472?
CVE-2022-26472 affects Android versions 10.0, 11.0, and 12.0.
Is user interaction required to exploit CVE-2022-26472?
No, user interaction is not needed for the exploitation of CVE-2022-26472.
Can CVE-2022-26472 be exploited remotely?
CVE-2022-26472 cannot be exploited remotely and requires local access to the device.