← Database

CVE-2022-23999

LOW CVSS: 3.9 Published: 2022-02-11 Modified: 2026-06-17

Description

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.

Affected Platforms

Google Android

Weakness Type

CWE-20, NVD-CWE-noinfo

References