VDB

CVE-2022-21748

CVE-2022-21748 PUBLISHED CVSS 5.5 MEDIUM

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06511030; Issue ID: ALPS06511030.

EPSS 0.10% · 0.9th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.10%
0.9th percentile

Affected Products

VendorProductVersions
googleandroid11.0, 12.0
MediaTek, Inc.MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8321, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797Android 11.0, 12.0

Timeline

  • Jun 6, 2022 CVE Published
  • Jun 7, 2022 EPSS Score
  • Jun 14, 2022 EPSS Score
  • Jul 26, 2022 EPSS Score
  • Sep 13, 2022 EPSS Score
  • Oct 31, 2022 EPSS Score
  • Dec 19, 2022 EPSS Score
  • Feb 5, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • May 13, 2023 EPSS Score
  • Jun 30, 2023 EPSS Score
  • Aug 17, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›