VULNERABILITY INTELLIGENCE
CVE-2022-36866
CVSS score4 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2022-09-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.
Weakness classification
- mobile.security@samsung.com: CWE-284
- nvd@nist.gov: NVD-CWE-Other
Primary references
- mobile.security@samsung.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory