CVE-2022-48296

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious apps, conveying false alarm information about external storage devices.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-281

Affected software

No affected versions have been published.

Timeline

Published: Feb 9, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-482977.5The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability CVE-2022-482987.5The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-boun CVE-2022-482997.5The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentialit CVE-2022-48305.4The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes before outputting them CVE-2022-483007.5The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentialit CVE-2022-483017.5The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-i CVE-2022-483027.5The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerability may affect data CVE-2022-483035.5GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to c CVE-2022-483055.5There is an identity authentication bypass vulnerability in Huawei Children Smart Watch (Simba-AL00) 1.1.1.274. Successful exploitation of t CVE-2022-483066.8Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows A malicious attacker CVE-2022-483073.7It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactor CVE-2022-483083.7It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory