Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-41926

Good to know:

icon

Date: November 25, 2022

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broadcastPermission allowing malicious apps to monitor communication. It is recommended that the Nextcloud Talk Android is upgraded to 14.1.0. There are no known workarounds for this issue.

Language: Java

Severity Score

Related Resources (5)

https://hackerone.com/reports/1596459
https://nvd.nist.gov/vuln/detail/CVE-2022-41926
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-564v-3rfc-352m
https://github.com/nextcloud/talk-android/pull/2148
https://www.mend.io/vulnerability-database/CVE-2022-41926

Severity Score

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Incorrect Permission Assignment for Critical Resource

CWE-732

Top Fix

icon

Upgrade Version

Upgrade to version v14.1.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us