CVE-2022-38670: High severity android vulnerability
Published Oct 14, 2022
·Updated
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
Affected Software
33 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Google Android
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Google Android=12.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Oct 14, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2022-38670?
CVE-2022-38670 is a vulnerability in the soundrecorder service in Google Android that allows for elevation of privilege in the contacts service.
2
What is the severity of CVE-2022-38670?
CVE-2022-38670 has a severity rating of 7.8, which is considered high.
3
How does CVE-2022-38670 affect Android?
CVE-2022-38670 affects Android versions 10.0, 11.0, and 12.0.
4
What is the fix for CVE-2022-38670?
To fix CVE-2022-38670, users should update their Android devices to the latest version available.
5
Where can I find more information about CVE-2022-38670?
More information about CVE-2022-38670 can be found on the official Android Security Bulletin for November 2022 and on the Unisoc website.