CVE-2022-22285

Severity CVSS v4.0:
Pending analysis
Type:
CWE-94 Code Injection
Publication date:
10/01/2022
Last modified:
19/01/2022

Description

A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and modifying the intent.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* 12.2.05.0 (excluding)
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* 12.3.02.1000 (excluding)
cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools