CVE-2021-39668

In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is needed for...

CVE-2022-24003

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent...

CVE-2022-24003

The CVE-2022-24003 vulnerability affects Samsung Bixby Vision prior to version 3.7.50.6. It is an information-disclosure flaw where internal Bixby Vision data can be accessed via an unprotected intent. The root cause is exposure of sensitive information exposing data to parties that should not ac...

CVE-2022-24000

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

CVE-2022-24000

CVE-2022-24000 is confirmed by multiple sources to be a local, Privilege-Granted vulnerability in Android components (DataUsageReminderReceiver and KnoxPrivacyNoticeReceiver) where an attacker can hijack a PendingIntent via an implicit Intent to access media files without permission. The issue is...

CVE-2022-23999

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

CVE-2022-23999

CVE-2022-23999 describes a PendingIntent hijacking vulnerability in Android’s CpaReceiver prior to Samsung SMR Feb-2022 Release 1, enabling local attackers to access media files via KnoxPrivacyNoticeReceiver through an implicit Intent. Affected component is the CpaReceiver/KnoxPrivacyNoticeReceiv...

CVE-2022-23427

PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent...

CVE-2022-23427

CVE-2022-23427 concerns a PendingIntent hijacking flaw in Samsung’s KnoxPrivacyNoticeReceiver. The vulnerability allows a local attacker to access media files via an implicit Intent prior to the SMR Feb-2022 Release 1. The descriptions across NVD, Red Hat, CNVD, CVE list, and related advisories a...

CVE-2021-39668: Externally Controlled Reference to a Resource in Another Sphere

In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is needed for...

CVE-2022-23434: Improper Control of Generation of Code

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S12, 3.7.50.6 in Andorid R11 and below allows attackers to execute privileged action by hijacking and modifying the intent...

Samsung KnoxPrivacyNoticeReceiver 输入验证错误漏洞

Samsung SettingsReceiver is a component in Samsung Samsung mobile devices. Samsung SettingsReceiver suffers from a PendingIntent hijacking vulnerability that originates from unauthorized access in SettingsReceiver, which can be exploited by a local attacker to gain unauthorized access to media...

Samsung DeX Home 代码注入漏洞

Samsung DeX Home is a Samsung DeX application for PC and Mac from Samsung South Korea. A security vulnerability exists in Samsung DeX Home that stems from a PendingIntent attack in the software, which allows an attacker to access files using system privileges...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An unspecified vulnerability exists in Google Android, which can be exploited by local attackers to access media files in the knoxprivacynotifyreceiver via an implicit Intent...

Samsung Bixby Vision 代码注入漏洞

Samsung Bixby Vision is a vision feature from the South Korean company Samsung Samsung. It allows you to access information about the world around you by simply turning on the camera. Samsung Bixby Vision has a security vulnerability that can be exploited by an attacker to perform privileged...

PT-2022-16402

Name of the Vulnerable Software and Affected Versions DataUsageReminderReceiver versions prior to SMR Feb-2022 Release 1 Description The issue allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent. This is due to a PendingIntent hijacking...

PT-2022-16405

Name of the Vulnerable Software and Affected Versions Bixby Vision versions prior to 3.7.50.6 Description The issue allows attackers to access internal data of Bixby Vision via an unprotected intent, potentially exposing sensitive information. Recommendations For versions prior to 3.7.50.6, updat...

CVE-2022-24003: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google. An input validation error vulnerability exists in Google Android, which can be exploited by a local attacker to gain unauthorized access to media files in KnoxPrivacyNoticeReceiver via an implicit intent...

PT-2022-16400

Name of the Vulnerable Software and Affected Versions CpaReceiver versions prior to SMR Feb-2022 Release 1 Description The issue allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent. This is due to a PendingIntent hijacking vulnerability...