PT-2022-17542 · Samsung · One Ui Home

Name of the Vulnerable Software and Affected Versions: One UI Home versions prior to SMR Mar-2022 Release 1 Description: The issue is related to improper authentication, which allows an attacker to generate pinned shortcuts without the user's consent. Recommendations: For versions prior to SMR...

CVE-2021-0979

In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges...