CVE-2022-48392: High severity Google Android vulnerability
In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2023-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48392?
CVE-2022-48392 is classified as a moderate-severity vulnerability that may allow for local escalation of privilege.
How do I fix CVE-2022-48392?
To fix CVE-2022-48392, ensure that your device is updated to the latest version of Android that contains the security patch for this vulnerability.
Which versions of Android are affected by CVE-2022-48392?
CVE-2022-48392 affects Android versions 10.0, 11.0, 12.0, and 13.0.
What could an attacker exploit with CVE-2022-48392?
An attacker could exploit CVE-2022-48392 to gain escalated permissions on the affected Android device.
Is CVE-2022-48392 related to any specific Android service?
Yes, CVE-2022-48392 is related to a potential missing permission check in the dialer service.