Information disclosure

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

Information disclosure

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information...

Samsung Mobile Device输入验证错误漏洞

Samsung Mobile is a cell phone from the South Korean company Samsung. An arbitrary file access vulnerability exists in Samsung Mobile DressRoom, which stems from incorrect cleaning of the Incoming Intent in Dressroom, and can be exploited by a local attacker to read and write arbitrary files...

Samsung SMR 安全漏洞

Samsung Dialer is a dialing feature for Samsung Samsung mobile devices. Samsung Dialer suffers from an information disclosure vulnerability that stems from an implicit intent hijacking in Dialer, which can be exploited by an attacker to access contact information...

Samsung Bixby Routines App 代码注入漏洞

Samsung Bixby Routines App is a feature from Samsung South Korea powered by machine learning to adapt to your life. It is used to perform various applications and settings. A security vulnerability in Bixby Routines in versions prior to version 3.1.21.8 in Android R 11.0 and version 2.6.30.5 in...

Samsung SMR 安全漏洞

Samsung ActivityMetricsLogger is a progress measurement logger for Samsung mobile devices. An unauthorized access vulnerability exists in Samsung ActivityMetricsLogger that stems from an implicit intent hijacking scenario in ActivityMetricsLogger, which can be exploited by an attacker to obtain...

Samsung Reminder App 代码注入漏洞

Samsung Reminder App is a reminder application from Samsung South Korea that comes pre-installed on Korean branded Samsung devices. The Samsung Reminder App suffers from a security vulnerability that allows an attacker to perform privileged actions by hijacking and modifying intent...

CVE-2022-22285

The CVE-2022-22285 entry describes a vulnerability in the Samsung Reminder App where a PendingIntent weakness allows hijacking/modifying the intent to perform a privileged action. Affected software is the Samsung Reminder App (pre-installed on Samsung devices) with vulnerable versions prior to 12...

CVE-2022-22270

CVE-2022-22270 is an implicit Intent hijacking vulnerability in Samsung Dialer prior to SMR Jan-2022 Release 1 that allows unprivileged apps to access contact information. Affected: Samsung Dialer on Samsung Android devices; root cause is improper handling of implicit intents in the Dialer. Impac...

CVE-2022-22267

Samsung ActivityMetricsLogger on mobile devices is affected by CVE-2022-22267: an implicit intent hijacking flaw that can disclose information about a running application. The vulnerability is tied to ActivityMetricsLogger before SMR Jan-2022 Release 1. Documented impact is information disclosure...

PT-2022-15316

Name of the Vulnerable Software and Affected Versions Dialer versions prior to SMR Jan-2022 Release 1 Description An implicit Intent hijacking issue allows unprivileged applications to access contact information. Recommendations For versions prior to SMR Jan-2022 Release 1, update to SMR Jan-2022...

CVE-2022-22270: Improper Control of Generation of Code

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information...

PT-2022-15312

Name of the Vulnerable Software and Affected Versions ActivityMetricsLogger versions prior to SMR Jan-2022 Release 1 Description The issue allows attackers to obtain running application information through an Implicit Intent hijacking vulnerability in ActivityMetricsLogger. Recommendations For...

CVE-2022-22286: Improper Control of Generation of Code

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R11.0 and 2.6.30.5 in Android Q10.0 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2022-22285: Improper Control of Generation of Code

A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R11.0 and 12.3.02.1000 in Android S12.0 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2022-22267: Improper Authorization

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

PT-2022-15329

Name of the Vulnerable Software and Affected Versions Reminder versions prior to 12.2.05.0 Reminder version 12.3.02.1000 Description A vulnerability in Reminder allows attackers to execute privileged actions by hijacking and modifying the intent using PendingIntent. This issue affects Android R...

ASB-A-123700107

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation...

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2022-36976)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox has a cross-site scripting vulnerability that stems from the fact that Firefox searches for text when a URL is received via the SEND intent, but subsequent use of the address bar can cause the URL to load...

CVE-2021-1024

In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android I...