CVE-2022-38669: High severity Google Android vulnerability
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2022-11-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38669?
CVE-2022-38669 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2022-38669?
To mitigate CVE-2022-38669, ensure that your device software is updated to the latest version provided by the manufacturer.
Which versions of Android are affected by CVE-2022-38669?
CVE-2022-38669 affects Android versions 10.0, 11.0, and 12.0.
What type of vulnerability is CVE-2022-38669?
CVE-2022-38669 is a missing permission check vulnerability that can lead to elevation of privilege.
Can CVE-2022-38669 be exploited remotely?
CVE-2022-38669 requires local access for exploitation, making remote attacks less likely.