Google Play Services Software Development Kit vulnerabilities

2 CVEs affecting Google Play Services Software Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-2390, published 2022-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-1799, published 2022-07-29. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend…
CVE-2022-2390, published 2022-08-12. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used,…