Skip to content
5.9 Medium

CVE-2022-36873 Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version…

Description

Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.

Affected products and versions

Product Affected versions Fixed in
com.samsung.android.waterplugin 2.2 earliest → < 2.2.11.22081151 2.2.11.22081151
The 2 CVEs of com.samsung.android.waterplugin →
Track this CVE