NetSight
IP …
medium4.0

CVE-2022-39894

Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via imp…

Impact

Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0, 12.0

Weakness classification

CWE-284

References