VULNERABILITY INTELLIGENCE

CVE-2022-36871

CVSS score5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2022-09-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L

Description

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Weakness classification

  • mobile.security@samsung.com: CWE-285
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references