CVE-2022-38688: Infoleak
Published Oct 14, 2022
·Updated
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected Software
32 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Google Android=12.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Oct 14, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-38688?
CVE-2022-38688 is considered to have a high severity level due to its potential for local information disclosure.
2
What does CVE-2022-38688 affect?
CVE-2022-38688 affects Android versions 10.0, 11.0, and 12.0.
3
How do I fix CVE-2022-38688?
To fix CVE-2022-38688, ensure that you update your Android device to the latest security patch provided by the manufacturer.
4
What type of vulnerability is CVE-2022-38688?
CVE-2022-38688 is a local information disclosure vulnerability due to a missing permission check.
5
Who is affected by CVE-2022-38688?
Users of Android devices running versions 10.0, 11.0, and 12.0 are affected by CVE-2022-38688.