Vulnerabilities > CVE-2022-22270 - Files or Directories Accessible to External Parties vulnerability in Google Android 10.0/11.0/9.0

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE

Summary

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information.

Vulnerable Configurations

Part Description Count
OS
Google
3