CVE-2022-1799: Google Play Services Software Development Kit

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release.

Affected products

• Google Google Play Services Software Development Kit: before 18.0.2 (fixed in 18.0.2)

Published 2022-07-29. Last modified 2026-06-17.