CVE-2022-36839

CVE-2022-36839 affects Samsung Checkout’s IAPService, with a SQL injection on IAP information exposure. Affected releases are prior to version 5.0.53.1; upgrading to 5.0.53.1 or later is the indicated remediation. The root cause is an SQL injection vulnerability in the IAPService, enabling access...

CVE-2022-39878

The CVE-2022-39878 entry affects Samsung Checkout prior to version 5.0.55.3. Affected software/component: Samsung Checkout (Android app). Root cause: improper access control allowing implicit intent broadcasts to expose sensitive information. Impact: potential disclosure of sensitive data to othe...