NetSight
IP …
medium5.5

CVE-2022-25815

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without perm…

Impact

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0

Weakness classification

CWE-276

References