6.6
Medium
CVE-2022-36869 Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows…
Description
Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.android.providers.contacts 12.7 | earliest → < 12.7.59 | 12.7.59 |