CVE-2022-28780

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access location information that set in Weather without permission. The patch adds proper protection to prevent access to location information.

Score

CVSS 3.1 5.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2022-05-03

Last modified

2024-08-03

Weaknesses

CWE-284

Affected products

• Android (Google)
• Samsung Mobile Devices (Samsung Mobile)

References

• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=5