Skip to content
OpenAdvisories
High · 7.7 CVE-2022-28781 EUVD-2022-33220GHSA-jvx3-gq7w-5xv7

Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. …

Published May 3, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds proper validation logic to check the caller.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices R(11), S(12) – < SMR May-2022 Release 1 SMR May-2022 Release 1

References