CVE-2022-48390: High severity Google Android vulnerability
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48390?
CVE-2022-48390 has been classified as a local escalation of privilege vulnerability.
How do I fix CVE-2022-48390?
To mitigate CVE-2022-48390, update your Android device to the latest security patch or version that addresses this vulnerability.
Which Android versions are affected by CVE-2022-48390?
CVE-2022-48390 affects Google Android versions 10.0, 11.0, and 12.0.
What impact does CVE-2022-48390 have on my device?
CVE-2022-48390 could allow an attacker with local access to escalate their privileges on the device.
Is CVE-2022-48390 specific to certain hardware?
CVE-2022-48390 is primarily related to specific versions of the Google Android operating system, rather than specific hardware.