Information disclosure

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent...

Information disclosure

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S12, 3.7.50.6 in Andorid R11 and below allows attackers to execute privileged action by hijacking and modifying the intent...

Spoofing

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

Design/Logic Flaw

In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is needed for...

Spoofing

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

Spoofing

PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent...

CVE-2021-39668

CVE-2021-39668 is an Android elevation-of-privilege issue identified in onActivityViewReady within DetailDialog.kt, caused by an Intent Redirect (confused deputy) that could allow local escalation of privileges to the System UI. Affected versions are Android 11 and 12; exploitation requires user ...

CVE-2022-24003

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent...

CVE-2022-24003

The CVE-2022-24003 vulnerability affects Samsung Bixby Vision prior to version 3.7.50.6. It is an information-disclosure flaw where internal Bixby Vision data can be accessed via an unprotected intent. The root cause is exposure of sensitive information exposing data to parties that should not ac...

CVE-2022-24000

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

CVE-2022-24000

CVE-2022-24000 is confirmed by multiple sources to be a local, Privilege-Granted vulnerability in Android components (DataUsageReminderReceiver and KnoxPrivacyNoticeReceiver) where an attacker can hijack a PendingIntent via an implicit Intent to access media files without permission. The issue is...

CVE-2022-23999

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...

CVE-2022-23999

CVE-2022-23999 describes a PendingIntent hijacking vulnerability in Android’s CpaReceiver prior to Samsung SMR Feb-2022 Release 1, enabling local attackers to access media files via KnoxPrivacyNoticeReceiver through an implicit Intent. Affected component is the CpaReceiver/KnoxPrivacyNoticeReceiv...

CVE-2022-23427

CVE-2022-23427 concerns a PendingIntent hijacking flaw in Samsung’s KnoxPrivacyNoticeReceiver. The vulnerability allows a local attacker to access media files via an implicit Intent prior to the SMR Feb-2022 Release 1. The descriptions across NVD, Red Hat, CNVD, CVE list, and related advisories a...

CVE-2022-23427

PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent...

Samsung DeX Home 代码注入漏洞

Samsung DeX Home is a Samsung DeX application for PC and Mac from Samsung South Korea. A security vulnerability exists in Samsung DeX Home that stems from a PendingIntent attack in the software, which allows an attacker to access files using system privileges...

Samsung Bixby Vision 代码注入漏洞

Samsung Bixby Vision is a vision feature from the South Korean company Samsung Samsung. It allows you to access information about the world around you by simply turning on the camera. Samsung Bixby Vision has a security vulnerability that can be exploited by an attacker to perform privileged...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google. An input validation error vulnerability exists in Google Android, which can be exploited by a local attacker to gain unauthorized access to media files in KnoxPrivacyNoticeReceiver via an implicit intent...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An unspecified vulnerability exists in Google Android, which can be exploited by local attackers to access media files in the knoxprivacynotifyreceiver via an implicit Intent...

Samsung KnoxPrivacyNoticeReceiver 输入验证错误漏洞

Samsung SettingsReceiver is a component in Samsung Samsung mobile devices. Samsung SettingsReceiver suffers from a PendingIntent hijacking vulnerability that originates from unauthorized access in SettingsReceiver, which can be exploited by a local attacker to gain unauthorized access to media...