CVE-2022-22272

Low

3.3/10

Summary

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: LOW
Confidentiality Impact: LOW
Availability Impact: NONE

References

Advisory Timeline

Published Jan 10, 2022

CVE-2022-22272

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS