Description
Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Customization Service | Android O(8.x) – < 2.2.02.1, Android P(9.0) – < 2.4.03.0, Android Q(10.0) – < 2.7.02.1, Android R(11.0) – < 2.9.01.1 | 2.2.02.1 |