Skip to content
OpenAdvisories
Medium · 5.7 CVE-2022-39899 EUVD-2022-42344GHSA-w3mw-7pp7-5rcf

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input eve…

Published Dec 8, 2022 · Updated Apr 23, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Select Q(10), R(11), S(12), T(13) devices – < SMR Dec-2022 Release 1 SMR Dec-2022 Release 1

References