CVE-2022-39109: High severity android vulnerability
Published Oct 14, 2022
·Updated
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Affected Software
30 affected components
Google Android=10.0
Google Android=11.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Oct 14, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-39109?
CVE-2022-39109 has a high severity level due to the potential for elevation of privilege without additional execution privileges.
2
How does CVE-2022-39109 affect Android devices?
CVE-2022-39109 affects Android versions 10.0 and 11.0, allowing unauthorized access within the Music service.
3
How do I fix CVE-2022-39109?
To fix CVE-2022-39109, ensure your device is updated with the latest security patches provided by the manufacturer.
4
What is the nature of the vulnerability in CVE-2022-39109?
CVE-2022-39109 is caused by a missing permission check in the Music service.
5
Are all versions of Android vulnerable to CVE-2022-39109?
No, only Android versions 10.0 and 11.0 are confirmed to be affected by CVE-2022-39109.