← Database

CVE-2022-36870

MEDIUM CVSS: 5.0 Published: 2022-09-09 Modified: 2026-06-17

Description

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

Affected Platforms

Samsung Samsung Pay KrSamsung Samsung Pay

Weakness Type

CWE-285, NVD-CWE-noinfo

References