PT-2022-20253

CVE-2022-30716

·

Published

2022-06-07

·

Updated

2022-06-11

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions DisplayToast prior to SMR Jun-2022 Release 1
Description The issue allows untrusted applications to access toast message information from the device due to an unprotected broadcast in the sendIntentForToastDumpLog function within DisplayToast.
Recommendations For versions prior to SMR Jun-2022 Release 1, update to SMR Jun-2022 Release 1 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-755: Improper Handling of Exceptional Conditions
CWE-280: Improper Handling of Insufficient Permissions or Privileges
Related identifiers
CVE-2022-30716
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com