CVE-2022-36850

MEDIUM CVSS: 4.0 Published: 2022-09-09 Modified: 2026-06-17

Description

Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid.

Affected Platforms

Google Android

Weakness Type

CWE-20, CWE-22

References