NetSight
IP …
low3.9

CVE-2022-23999

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPri…

Impact

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0, 12.0

Weakness classification

CWE-20

References