VULNERABILITY INTELLIGENCE

CVE-2022-22286

CVSS score4.4 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2022-01-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Description

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) allows attackers to execute privileged action by hijacking and modifying the intent.

Weakness classification

  • mobile.security@samsung.com: CWE-94
  • nvd@nist.gov: CWE-94

Primary references