Skip to content
OpenAdvisories
Medium · 5.0 CVE-2022-36871 EUVD-2022-39571GHSA-376x-5mmm-6vrc

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attack…

Published Sep 9, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Pay

Description

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Pay unspecified – < 5.0.63 for KR and 5.1.47 for Global 5.0.63 for KR and 5.1.47 for Global

References