7.8
CWE
862
Advisory Published
Updated

CVE-2022-38670

First published: Fri Oct 14 2022(Updated: )

In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.

Credit: security@unisoc.com

Affected SoftwareAffected VersionHow to fix
Google Android=10.0
Google Android=11.0
Google Android=12.0
Unisoc S8000
Unisoc Sc7731e
Unisoc Sc9832e
Unisoc Sc9863a
Unisoc T310
Unisoc T606
Unisoc T610
Unisoc T612
Unisoc T616
Unisoc T618
Unisoc T760
Unisoc T770
Unisoc T820
Google Android

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2022-38670?

    CVE-2022-38670 is a vulnerability in the soundrecorder service in Google Android that allows for elevation of privilege in the contacts service.

  • What is the severity of CVE-2022-38670?

    CVE-2022-38670 has a severity rating of 7.8, which is considered high.

  • How does CVE-2022-38670 affect Android?

    CVE-2022-38670 affects Android versions 10.0, 11.0, and 12.0.

  • What is the fix for CVE-2022-38670?

    To fix CVE-2022-38670, users should update their Android devices to the latest version available.

  • Where can I find more information about CVE-2022-38670?

    More information about CVE-2022-38670 can be found on the official Android Security Bulletin for November 2022 and on the Unisoc website.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203