CVE-2022-20562 - CERT CVE
ID CVE-2022-20562
Sažetak In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231630423References: N/A
Reference
CVSS
Base: 3.3
Impact: 1.4
Exploitability:1.8
Pristup
VektorSloženostAutentikacija
LOCAL LOW LOW
Impact
PovjerljivostCjelovitostDostupnost
LOW NONE NONE
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Zadnje važnije ažuriranje 21-04-2025 - 14:15
Objavljeno 16-12-2022 - 16:15