CVE-2022-22285
Severity CVSS v4.0:
Pending analysis
Type:
CWE-94
Code Injection
Publication date:
10/01/2022
Last modified:
19/01/2022
Description
A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and modifying the intent.
Impact
Base Score 3.x
7.10
Severity 3.x
HIGH
Base Score 2.0
3.60
Severity 2.0
LOW
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* | 12.2.05.0 (excluding) | |
| cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* | 12.3.02.1000 (excluding) | |
| cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



