5.9
Medium
CVE-2022-36873 Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version…
Description
Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| com.samsung.android.waterplugin 2.2 | earliest → < 2.2.11.22081151 | 2.2.11.22081151 |