Vulnerability Details CVE-2022-28781
Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds proper validation logic to check the caller.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.6%
CVSS Severity
CVSS v3 Score 7.7
CVSS v2 Score 7.2
Products affected by CVE-2022-28781
-
cpe:2.3:o:google:android:11.0
-
cpe:2.3:o:google:android:12.0