← Database

CVE-2022-22272

MEDIUM CVSS: 4.0 Published: 2022-01-10 Modified: 2026-06-17

Description

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission

Affected Platforms

Google Android

Weakness Type

CWE-285, NVD-CWE-Other

References