CVE-2022-36829CWE-927

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via…

Medium · published August 5, 2022

CVSS v3.1
6.2
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Weakness
CWE-927 · Use of Implicit Intent for Sensitive Communication
Published
2022-08-05T15:16Z
EPSS history
Timeline
  • 05 AUG 15:16Z
    PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via…
    cvelistv5