VULNERABILITY INTELLIGENCE

CVE-2022-36869

CVSS score6.6 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2022-09-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Description

Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission.

Weakness classification

  • mobile.security@samsung.com: CWE-284
  • nvd@nist.gov: NVD-CWE-Other

Primary references