CVEvulnerability
CVE-2022-20241
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2022-08-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-20
Description
In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-217185011
Affected configurations
• google android 13.0.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://source.android.com/security/bulletin/android-13 Vendor Advisory
- https://source.android.com/security/bulletin/android-13 Vendor Advisory