Description
In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-218341397
Related CPE's
o
android
4
References
https://source.android.com/security/bulletin/2022-06-01
Vendor Advisory
https://source.android.com/security/bulletin/2022-06-01
Vendor Advisory
CVSS impact metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 · High
Information
Source identifier
Vulnerability status
Modified
Published
2022-06-15T11:15:08.857Z
3 years agoLast modified
2024-11-21T05:42:13.490Z
1 year ago