CVE-2022-47339: Command Injection
In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
Other sources
There is a Command injection In CMD Service, which may lead Eop issue
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-02-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47339?
CVE-2022-47339 has a high severity rating due to the potential for local escalation of privilege.
How do I fix CVE-2022-47339?
To fix CVE-2022-47339, ensure that permission checks are appropriately implemented in the affected cmd services.
What software versions are affected by CVE-2022-47339?
CVE-2022-47339 affects Google Android versions 10.0, 11.0, and 12.0.
What vulnerabilities does CVE-2022-47339 introduce?
CVE-2022-47339 introduces an OS command injection vulnerability that could allow unauthorized command execution.
Who is primarily affected by CVE-2022-47339?
Users of Google Android devices running the specified vulnerable versions are primarily affected by CVE-2022-47339.