Skip to content
OpenAdvisories
Medium · 6.2 CVE-2022-39912 EUVD-2022-42357GHSA-v3j5-cg8r-8v4j

Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows…

Published Dec 8, 2022 · Updated Apr 23, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to set some setting value in Secure folder.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices unspecified – < Android T(13) Android T(13)

References