← Database

CVE-2022-39851

MEDIUM CVSS: 4.0 Published: 2022-10-07 Modified: 2026-06-17

Description

Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BIND_REMOTEVIEWS permission.

Affected Platforms

Google Android

Weakness Type

CWE-284, NVD-CWE-Other

References