CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.

Score

CVSS 3.1 4.0 Medium

Status

Modified - mobile.security@samsung.com

Published

2022-09-09

Last modified

2024-08-03

Weaknesses

CWE-284

Affected products

• Group Sharing (Samsung)
• Group Sharing (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09