Vulnerability

CVE-2022-2985

Location: OS
In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.

Impact

Severity (Manufact.)

HIGH

Severity (NIST)

7.8

Severity (Android)

N/A

Chipsets

13

Devices

152

Affected Hardware

NameAlso known asManufacturer
SC7731EF
UNISOC
SC7731E
UNISOC
SC9832E
UNISOC
SC9863A
UNISOC
T310
UNISOC
T606
UNISOC
T610
UNISOC
T612
UNISOC
T616
UNISOC
T618
UNISOC
13 of 13 row(s) shown.

Rows per page

Page 1 of 2

Timeline

Introduced (est):
Jan 1, 2018
Reported:
Unknown
Advisory Published:
Nov 8, 2022
CVE Published:
Oct 14, 2022
Android Patch Level:
Nov 2022
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter