CVE-2022-33734

Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.

Score

CVSS 3.1 6.2 Medium

Status

Modified - mobile.security@samsung.com

Published

2022-08-05

Last modified

2024-08-03

Weaknesses

CWE-927

Affected products

• Charm (Samsung)
• Charm By Samsung (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=08