Medium · 5.7 CVE-2022-1799 EUVD-2022-25078GHSA-qfhf-vjgv-mm2w

Incorrect signature verification on Google play-services-basement in Google Play SDK

Published Jul 29, 2022 · Updated Apr 21, 2025 · Assigned by Google

Vendor: Google Product: Google Play Services SDK

Description

Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release.

Affected products

Vendor	Product	Affected	Fixed
Google	Google Play Services SDK	unspecified – < 18.0.2	18.0.2

References

https://developers.google.com/android/guides/releases#may_03_2022