CVE-2022-22270

CVE-2022-22270 is an implicit Intent hijacking vulnerability in Samsung Dialer prior to SMR Jan-2022 Release 1 that allows unprivileged apps to access contact information. Affected: Samsung Dialer on Samsung Android devices; root cause is improper handling of implicit intents in the Dialer. Impac...

CVE-2022-22267

Samsung ActivityMetricsLogger on mobile devices is affected by CVE-2022-22267: an implicit intent hijacking flaw that can disclose information about a running application. The vulnerability is tied to ActivityMetricsLogger before SMR Jan-2022 Release 1. Documented impact is information disclosure...

PT-2022-15316

Name of the Vulnerable Software and Affected Versions Dialer versions prior to SMR Jan-2022 Release 1 Description An implicit Intent hijacking issue allows unprivileged applications to access contact information. Recommendations For versions prior to SMR Jan-2022 Release 1, update to SMR Jan-2022...

PT-2022-15312

Name of the Vulnerable Software and Affected Versions ActivityMetricsLogger versions prior to SMR Jan-2022 Release 1 Description The issue allows attackers to obtain running application information through an Implicit Intent hijacking vulnerability in ActivityMetricsLogger. Recommendations For...

Samsung SemRewardManager BSSID Information Disclosure Vulnerability

Samsung SemRewardManager is an application for Samsung Samsung mobile devices. An information disclosure vulnerability exists in Samsung SemRewardManager that stems from improper use of implicit intent in SemRewardManager, which can be exploited by an attacker to access the BSSID...

CVE-2021-25515

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID...

CVE-2021-25515

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID...

CVE-2021-25515

Samsung SemRewardManager on Android is affected by CVE-2021-25515 due to improper usage of implicit intents, enabling an attacker with local access to read the device’s BSSID. The root cause is an implicit-intent misuse in SemRewardManager prior to SMR Dec-2021 Release 1, leading to information d...

PT-2021-16705 · Unknown · Semrewardmanager

Name of the Vulnerable Software and Affected Versions: SemRewardManager versions prior to SMR Dec-2021 Release 1 Description: The issue is related to an improper usage of implicit intent in SemRewardManager, allowing attackers to access BSSID. Recommendations: For versions prior to SMR Dec-2021...

CVE-2021-25515: Improper Privilege Management

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID...

ASB-A-185126149

In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for...

Information disclosure

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2021-25352

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2021-25352

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2021-25352

Affected product/component: Samsung Bixby Voice. Vulnerability: Privilege escalation via hijacking/modifying a PendingIntent with implicit intents. Root cause: Implicit PendingIntent handling allows an attacker to execute privileged actions when interacting with Bixby Voice. Affected versions: pr...

CVE-2021-25352: Improper Authorization

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

Mail.ru: [Mail.Ru for Android] Replacing "Add filter" screen by malicious screen

An implicit intent was invoked on "Add filter" action of Mail.ru Mail application for Android leading to interface spoofing possibility...

JVN#67435981: LINE for Android vulnerable in handling of implicit intents

LINE for Android provided by NHN Japan, is an application for communication with others. LINE for Android contains a vulnerability in the handling of implicit intents. Impact Information such as messages sent by LINE may be leaked to a third party through a malicious application. Solution Update...