Skip to content
OpenAdvisories
Medium · 5.0 CVE-2022-36872 EUVD-2022-39572GHSA-w6mf-x3g4-2c26

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attac…

Published Sep 9, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Pay

Description

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Pay unspecified – < 5.0.63 for KR and 5.1.47 for Global 5.0.63 for KR and 5.1.47 for Global

References