CVE-2022-1799 — Incorrect signature verification on Google play-services-basement in Google Play SDK

CVE-2022-1799

Incorrect signature verification on Google play-services-basement in Google Play SDK PUBLISHED

Description (CNA)

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release.

Affected (CNA)

Vendor / product	Versions
Google LLC / Google Play Services SDK	affected unspecified before 18.0.2

CWE

CWE-501

References

https://developers.google.com/android/guides/releases#may_03_2022

ADP enrichment

CVE

No English description supplied.

https://developers.google.com/android/guides/releases#may_03_2022

CISA-ADP

No English description supplied.

No references supplied.