Android Telecom Side Channel App-Install Info Leak
CVE-2022-20531 Published on December 16, 2022
In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Products Associated with CVE-2022-20531
Want to know whenever a new CVE is published for Google Android? stack.watch will email you.
Affected Versions
Google Android Version 14 is affected by CVE-2022-20531Exploit Probability
EPSS
0.03%
Percentile
7.73%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.