Skip to content
OpenAdvisories
Medium · 6.6 CVE-2022-36869 EUVD-2022-39569GHSA-v6g2-g5rp-j92j

Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the f…

Published Sep 9, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: com.android.providers.contacts Platform: Android

Description

Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission.

Affected products

VendorProductAffectedFixed
Samsung Mobile com.android.providers.contacts unspecified – < 12.7.59 12.7.59

References