CVE-2022-36836

CVE-2022-36836 affects Samsung Charm (Charm by Samsung) prior to version 1.2.3, where an unprotected provider enables reading the connection state without permission. The underlying issue is a lack of access protection in the provider interface, exposing connection state data to attackers with lo...