Sign in

4.0 Medium

CVE-2022-39894 Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1…

Description

Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Mobile Devices	Versions not published

The 866 CVEs of Samsung Mobile Devices →

CVE-2026-21126 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 6.9 Medium CVE-2026-21125 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21124 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21123 Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with… 6.7 Medium

Do you use Samsung Mobile Devices?

Track this CVE Watch Samsung Mobile Devices Check my SBOMs

www.cveye.io/en/cve/CVE-2022-39894

Timeline

Published December 8, 2022
Last modified April 23, 2025

References

security.samsungmobile.com security.samsungmobile.com

Track this CVE