CVE-2022-36830

CVE-2022-36830 affects Samsung Charm (Charm by Samsung) prior to version 1.2.3. The root cause is a PendingIntent hijacking in the cancelAlarmManager, enabling local attackers to access files without permission via implicit intents. Affected software is Charm before 1.2.3; impact includes high co...

CVE-2022-36829

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

CVE-2022-36829

Summary of findings (CVE-2022-36829) : The vulnerability affects Charm by Samsung, in the releaseAlarm function. It is a PendingIntent hijacking issue that allows local attackers to access files without permission via implicit intents on versions prior to 1.2.3 . The root cause is a flaw in how r...

CVE-2022-33725

The CVE-2022-33725 issue affects Samsung Knox VPN, where a flaw in PendingIntent usage could allow a local attacker to access a content provider with system privileges. Root cause: improper PendingIntent handling within Knox VPN prior to SMR Aug-2022 Release 1. Impact per sources: potential media...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices DeX for PC module SMR Aug-2022 Release 1 prior to Release 1, which arises from a...

PT-2022-23634 · Samsung · Charm

Name of the Vulnerable Software and Affected Versions: Charm by Samsung versions prior to 1.2.3 Description: The issue allows local attackers to access files without permission via implicit intent, exploiting a PendingIntent hijacking vulnerability in the cancelAlarmManager function...

PT-2022-23633 · Samsung · Charm

Name of the Vulnerable Software and Affected Versions: Charm by Samsung versions prior to 1.2.3 Description: The issue allows local attackers to access files without permission via implicit intent, exploiting a PendingIntent hijacking vulnerability in the releaseAlarm function. Recommendations: F...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. A security vulnerability exists in SAMSUNG Mobile devices Charm versions prior to 1.2.3, which stems from a PendingIntent hijacking vulnerability i...

Samsung SmartThings PendingIntent Hijacking Vulnerability

SmartThings is a powerful Samsung smart home mobile app. A PendingIntent hijacking vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. An unauthorized local attacker can exploit the vulnerability to access files via an implicit Intent...

CVE-2022-30747

PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent...

Spoofing

PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent...

CVE-2022-30747

The CVE-2022-30747 issue affects Samsung SmartThings on Android, where a PendingIntent hijacking vulnerability in the app allows a local attacker to access files via an implicit Intent. Impact is realized if using versions prior to Samsung SmartThings 1.7.85.25; the documents indicate this fix ve...

Samsung mobile 安全漏洞

SmartThings is a powerful Samsung smart home mobile app. A PendingIntent hijacking vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. An unauthorized local attacker can exploit the vulnerability to access files via an implicit Intent...

ASB-A-212467440

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

Notification implicit PendingIntent in com.nextcloud.client allows to access contacts

None...

CVE-2022-27837

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

CVE-2022-27837

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

Privilege escalation

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

CVE-2022-27837

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

CVE-2022-27837

CVE-2022-27837 involves a vulnerability in Android’s Accessibility framework through the use of PendingIntent. The issue, described across multiple sources, is triggered in Android R (11.0) prior to 12.5.3.2 and Android S (12.0) prior to 13.0.1.1, where an attacker could access files with system ...