← Database

CVE-2022-28781

HIGH CVSS: 7.7 Published: 2022-05-03 Modified: 2026-06-17

Description

Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds proper validation logic to check the caller.

Affected Platforms

Google Android

Weakness Type

CWE-20, CWE-20

References