Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-25814 EUVD-2022-30454GHSA-7xcq-9v27-4gw8

PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unaut…

Published Mar 8, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices R(11), S(12) – < SMR Mar-2022 Release 1 SMR Mar-2022 Release 1

References