VULNERABILITY INTELLIGENCE

CVE-2022-36870

CVSS score5 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2022-09-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L

Description

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Weakness classification

  • mobile.security@samsung.com: CWE-285
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references