VULNERABILITY INTELLIGENCE

CVE-2022-33727

CVSS score4.8 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2022-08-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Description

A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack.

Weakness classification

  • mobile.security@samsung.com: CWE-1021
  • nvd@nist.gov: CWE-1021

Primary references