6.2
Medium
CVE-2024-20850 Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to…
Description
Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Pay 5.4 | earliest → < 5.4.99 | 5.4.99 |
Other CVEs of Samsung Pay
The 6 CVEs of Samsung Pay →
CVE-2022-36872
Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47…
5.0
Medium
CVE-2022-36870
Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and…
5.0
Medium
CVE-2022-36871
Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for…
5.0
Medium
CVE-2021-25527
Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77…
3.8
Low