Skip to content
OpenAdvisories
Medium · 6.2 CVE-2022-36830 EUVD-2022-39530GHSA-pvc4-x6fm-w5wg

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access fil…

Published Aug 5, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Charm by Samsung

Description

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.

Affected products

VendorProductAffectedFixed
Samsung Mobile Charm by Samsung unspecified – < 1.2.3 1.2.3

References