CVE-2022-47338: High severity Google Android vulnerability
Published Apr 1, 2023
·Updated
In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.
Affected Software
32 affected componentsFixes available
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Google Android=10.0
Google Android=11.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Google Android
android/:unknown:>=SoCVersion:0<SoCVersion:2023-04-05
SoCVersion:2023-04-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-04-05
Event History
Apr 1, 2023
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Apr 3, 2023
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Apr 11, 2023
CVE Published
via MITRE·11:09 AM
Data Sourced
via MITRE·11:09 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-47338?
CVE-2022-47338 is classified as a moderate severity vulnerability that can lead to local denial of service in telecom services.
2
How do I fix CVE-2022-47338?
To mitigate CVE-2022-47338, users should ensure their Android devices are updated to the latest security patches provided by Google.
3
Which versions of Android are affected by CVE-2022-47338?
CVE-2022-47338 affects Android versions 10.0 and 11.0.
4
Can CVE-2022-47338 be exploited remotely?
CVE-2022-47338 is not directly exploitable remotely, as it requires local access to the device.
5
Is the Unisoc S8000 vulnerable to CVE-2022-47338?
No, the Unisoc S8000 is not listed as vulnerable to CVE-2022-47338.