6.2
Medium
CVE-2022-36830 PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local…
Description
PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Charm by Samsung 1.2 | earliest → < 1.2.3 | 1.2.3 |
Other CVEs of Charm by Samsung
The 5 CVEs of Charm by Samsung →
CVE-2022-36836
Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection…
6.2
Medium
CVE-2022-36829
PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local…
6.2
Medium
CVE-2022-33734
Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker…
6.2
Medium
CVE-2022-33733
Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get…
6.2
Medium