CVE-2022-23434CWE-94

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to…

Medium · published February 11, 2022

CVSS v3.1
4.4
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2022-02-11T17:40Z
EPSS history
Timeline
  • 11 FEB 17:40Z
    A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to…
    cvelistv5