VULNERABILITY INTELLIGENCE
CVE-2022-36833
CVSS score7.3 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2022-08-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Description
Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name.
Weakness classification
- mobile.security@samsung.com: CWE-269
- nvd@nist.gov: CWE-269
Primary references
- mobile.security@samsung.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory