Description
In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224771921
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-25611 | In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-224771921 |
References
| Link | Providers |
|---|---|
| https://source.android.com/security/bulletin/2022-10-01 |
|
History
No history.
Status: PUBLISHED
Assigner: google_android
Published:
Updated: 2024-08-03T02:10:44.472Z
Reserved: 2021-10-14T00:00:00.000Z
Link: CVE-2022-20351
No data.
Status : Modified
Published: 2022-10-11T20:15:10.877
Modified: 2024-11-21T06:42:38.567
Link: CVE-2022-20351
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD