← Database

CVE-2022-28780

MEDIUM CVSS: 5.0 Published: 2022-05-03 Modified: 2026-06-17

Description

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information.

Affected Platforms

Google Android

Weakness Type

CWE-284, NVD-CWE-Other

References