Skip to content
OpenAdvisories
Medium · 5.0 CVE-2022-36870 EUVD-2022-39570GHSA-3xw3-hxv2-jwq2

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global …

Published Sep 9, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Pay

Description

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Pay unspecified – < 5.0.63 for KR and 5.1.47 for Global 5.0.63 for KR and 5.1.47 for Global

References