PT-2022-25106 · Google · Android

Yousra Aafer

·

CVE-2022-39912

·

Published

2022-12-08

·

Updated

2022-12-12

CVSS v3.1

6.2

Medium

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Android versions prior to T(13)
Description The issue is related to improper handling of insufficient permissions in the setSecureFolderPolicy function within the PersonaManagerService. This allows local attackers to set certain setting values in the Secure folder.
Recommendations For Android versions prior to T(13), update to Android T(13) or later to resolve the issue.

Fix

Improper Handling of Exceptional Conditions

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-755CWE-280

Related Identifiers

CVE-2022-39912

Affected Products

Android