CVE-2022-36871

🗓️ 09 Sep 2022 14:40:01Reported by Samsung MobileType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 51 Views

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-36871	9 Sep 202215:15	–	attackerkb
CNNVD	SAMSUNG Mobile devices 安全漏洞	9 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-36871	9 Sep 202214:40	–	cvelist
EUVD	EUVD-2022-39571	3 Oct 202520:07	–	euvd
NVD	CVE-2022-36871	9 Sep 202215:15	–	nvd
Prion	Design/Logic Flaw	9 Sep 202215:15	–	prion
Positive Technologies	PT-2022-23675 · Samsung · Samsung Pay	9 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-36871	22 May 202523:13	–	redhatcve

NVD

Node

samsung samsung_payRange<5.1.47android

samsung samsung_pay_krRange<5.0.63android

[
  {
    "product": "Samsung Pay",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "5.0.63 for KR and 5.1.47 for Global",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]