CVE-2022-47461: Medium severity Google Android vulnerability
com.android.phone do not check the permission , which may cause a Elevation of privilege.
Other sources
In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47461?
CVE-2022-47461 is classified as a high-severity vulnerability due to the potential for local escalation of privilege.
Which versions of Android are affected by CVE-2022-47461?
CVE-2022-47461 affects Android versions 10.0 and 11.0.
How do I fix CVE-2022-47461?
To fix CVE-2022-47461, users should update their Android devices to the latest security patch that addresses this vulnerability.
What type of vulnerability is CVE-2022-47461?
CVE-2022-47461 is a local escalation of privilege vulnerability stemming from a missing permission check in telephone service.
Can CVE-2022-47461 be exploited remotely?
CVE-2022-47461 cannot be exploited remotely as it requires local access to the affected device.