CVE-2022-22286

Samsung Bixby Routines exposes a PendingIntent-related vulnerability. In affected builds for Android R (11.0) and Q (10.0), prior to versions 3.1.21.8 and 2.6.30.5 respectively, an attacker could hijack/modify an intent to perform a privileged action. Root cause: improper handling of PendingInten...

CVE-2022-22285

The CVE-2022-22285 entry describes a vulnerability in the Samsung Reminder App where a PendingIntent weakness allows hijacking/modifying the intent to perform a privileged action. Affected software is the Samsung Reminder App (pre-installed on Samsung devices) with vulnerable versions prior to 12...

PT-2022-15329

Name of the Vulnerable Software and Affected Versions Reminder versions prior to 12.2.05.0 Reminder version 12.3.02.1000 Description A vulnerability in Reminder allows attackers to execute privileged actions by hijacking and modifying the intent using PendingIntent. This issue affects Android R...

PT-2022-15330

Name of the Vulnerable Software and Affected Versions Bixby Routines versions prior to 3.1.21.8 Description A vulnerability in Bixby Routines allows attackers to execute privileged actions by hijacking and modifying the intent using PendingIntent. This issue affects devices running Android R 11.0...

CVE-2022-22286: Improper Control of Generation of Code

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R11.0 and 2.6.30.5 in Android Q10.0 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2022-22285: Improper Control of Generation of Code

A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R11.0 and 12.3.02.1000 in Android S12.0 allows attackers to execute privileged action by hijacking and modifying the intent...

PT-2022-10926

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local...

PT-2022-10935

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description The issue is related to a possible permissions bypass due to an unsafe PendingIntent in the sendLegacyVoicemailNotification function of LegacyModeSmsHandler.java. This could lead to loc...

PT-2022-10933

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description The issue is related to an unsafe PendingIntent in the EuiccNotificationManager.java, specifically in the showCarrierAppInstallationNotification method. This could allow access to...

ASB-A-185126319

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for...

CVE-2021-0953

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

CVE-2021-0953

CVE-2021-0953 affects Android 9–12. The issue is in SearchWidgetProvider.setOnClickActivityIntent, where an unsafe PendingIntent could allow access to contacts and history bookmarks without permission, enabling local privilege escalation with no user interaction required. Android patch levels 202...

CVE-2021-0932

In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for...

CVE-2021-0932

CVE-2021-0932 affects Android 10 via an unsafe PendingIntent in showNotification (NavigationModeController.java), enabling a possible confused deputy and local elevation of privilege with actions executed as the System UI, without user interaction. Public details consistently reference the same r...

CVE-2021-0932: Undefined Security Weakness

In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for...

CVE-2021-0953: Improper Preservation of Permissions

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

PT-2021-13368

Name of the Vulnerable Software and Affected Versions Android versions Android-9 through Android-12 Description The issue is related to an unsafe PendingIntent in the setOnClickActivityIntent of SearchWidgetProvider.java. This could allow access to contacts and history bookmarks without permissio...

ASB-A-173025705

In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent. This could lead to local escalation of privilege that allows actions performed as the System UI with User execution privileges needed. User interaction is not needed for...

PT-2021-13361

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible confused deputy due to an unsafe PendingIntent in the showNotification function of NavigationModeController.java. This could lead to local escalation of privilege,...