CVE-2022-36870

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Score

CVSS 3.1 6.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2022-09-09

Last modified

2024-08-03

Weaknesses

CWE-285

Affected products

• Samsung Pay (Samsung)
• Samsung Pay Kr (Samsung)
• Samsung Pay (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09