Skip to content
OpenAdvisories
Low · 3.9 CVE-2022-39910 EUVD-2022-42355GHSA-jj68-3qxc-xvjv

Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on …

Published Dec 8, 2022 · Updated Apr 23, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Pass

Description

Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Pass unspecified – < 4.0.06.7 4.0.06.7

References