5.7
Medium
CVE-2022-1799 Incorrect signature trust exists within Google Play services SDK play-services-basement
Description
Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Play Services SDK 18.0 | earliest → < 18.0.2 | 18.0.2 |