CVE-2022-1799

Critical

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted…

Google·CWE-501·Published 2022-07-29

CVSS

9.8

EPSS

0.00

KEV

Exploits

cve.orgen

240 chars

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release.

NVDen

240 chars

NVDes

289 chars

Se presenta una firma confiable incorrecta dentro del SDK de servicios de Google Play play-services-basement. El SDK confía en una versión de depuración de los servicios de Google Play para los dispositivos que no son GMS. Es recomendado actualizar el SDK más allá de la versión 03-05-2022

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	5.7	—	—	CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N