CVE-2022-47027

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://corporate.timmystudios.com/Product
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2022-47027/CVE%20detail.mdExploit, Third Party Advisory
https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.timssfasttypingkeyboardBroken Link
https://corporate.timmystudios.com/Product
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2022-47027/CVE%20detail.mdExploit, Third Party Advisory
https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.timssfasttypingkeyboardBroken Link

Timeline

Published: Apr 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-470285.5An issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of service via arbitary data injection to func CVE-2022-470297.8An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function updat CVE-2022-47038.1The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_import' AJAX action CVE-2022-470349.8A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication.CVE-2022-470359.8Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConf CVE-2022-470369.8Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an CVE-2022-470377.5Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials.CVE-2022-47048.1The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_templates_kit' AJAX action i CVE-2022-470407.8An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running the tcpdump command CVE-2022-470428.8MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do.CVE-2022-47054.3The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_setup' AJAX action i CVE-2022-470526.1The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can be leveraged to perfo