CVE-2022-38670: High severity Google Android vulnerability
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2022-11-05
Event History
Frequently Asked Questions
What is CVE-2022-38670?
CVE-2022-38670 is a vulnerability in the soundrecorder service in Google Android that allows for elevation of privilege in the contacts service.
What is the severity of CVE-2022-38670?
CVE-2022-38670 has a severity rating of 7.8, which is considered high.
How does CVE-2022-38670 affect Android?
CVE-2022-38670 affects Android versions 10.0, 11.0, and 12.0.
What is the fix for CVE-2022-38670?
To fix CVE-2022-38670, users should update their Android devices to the latest version available.
Where can I find more information about CVE-2022-38670?
More information about CVE-2022-38670 can be found on the official Android Security Bulletin for November 2022 and on the Unisoc website.