Samsung Dialer Information Disclosure Vulnerability (CNVD-2025-02600)

Samsung Dialer is a dialing feature for Samsung Samsung mobile devices. Samsung Dialer suffers from an information disclosure vulnerability that stems from an implicit intent hijacking in Dialer, which can be exploited by an attacker to access contact information...

VulnCheck KEV: CVE-2014-0130

Directory traversal vulnerability in actionpack/lib/abstractcontroller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request...

CVE-2022-22270

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information...

CVE-2022-22270

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information...

CVE-2022-22267

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

CVE-2022-22267

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

CVE-2022-22267

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

Information disclosure

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information...

Information disclosure

Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...

Samsung SMR security vulnerabilities

Samsung ActivityMetricsLogger is a progress measurement logger for Samsung mobile devices. An unauthorized access vulnerability exists in Samsung ActivityMetricsLogger that stems from an implicit intent hijacking scenario in ActivityMetricsLogger, which can be exploited by an attacker to obtain...

Samsung SMR security vulnerabilities

Samsung Dialer is a dialing feature for Samsung Samsung mobile devices. Samsung Dialer suffers from an information disclosure vulnerability that stems from an implicit intent hijacking in Dialer, which can be exploited by an attacker to access contact information...

CVE-2022-22270

CVE-2022-22270 is an implicit Intent hijacking vulnerability in Samsung Dialer prior to SMR Jan-2022 Release 1 that allows unprivileged apps to access contact information. Affected: Samsung Dialer on Samsung Android devices; root cause is improper handling of implicit intents in the Dialer. Impac...

CVE-2022-22267

Samsung ActivityMetricsLogger on mobile devices is affected by CVE-2022-22267: an implicit intent hijacking flaw that can disclose information about a running application. The vulnerability is tied to ActivityMetricsLogger before SMR Jan-2022 Release 1. Documented impact is information disclosure...

PT-2022-15312

Name of the Vulnerable Software and Affected Versions ActivityMetricsLogger versions prior to SMR Jan-2022 Release 1 Description The issue allows attackers to obtain running application information through an Implicit Intent hijacking vulnerability in ActivityMetricsLogger. Recommendations For...

PT-2022-15316

Name of the Vulnerable Software and Affected Versions Dialer versions prior to SMR Jan-2022 Release 1 Description An implicit Intent hijacking issue allows unprivileged applications to access contact information. Recommendations For versions prior to SMR Jan-2022 Release 1, update to SMR Jan-2022...

Return variable can remain unassigned in _sendForReceiver

Handle sirhashalot Vulnerability details Impact The sendForReceiver function only sets a return function in the "if" code block, not the "else" case. If the "else" case is true, no value is returned. The result of this oversight is that the sendForReceiver function called from the distribute...

Samsung SemRewardManager BSSID Information Disclosure Vulnerability

Samsung SemRewardManager is an application for Samsung Samsung mobile devices. An information disclosure vulnerability exists in Samsung SemRewardManager that stems from improper use of implicit intent in SemRewardManager, which can be exploited by an attacker to access the BSSID...

CVE-2021-25515

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID...

CVE-2021-25515

An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID...

CVE-2021-25515

Samsung SemRewardManager on Android is affected by CVE-2021-25515 due to improper usage of implicit intents, enabling an attacker with local access to read the device’s BSSID. The root cause is an implicit-intent misuse in SemRewardManager prior to SMR Dec-2021 Release 1, leading to information d...