medium5.0
CVE-2022-36872
Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files…
Impact
Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Samsung Pay | before 5.1.47 |
| Samsung | Samsung Pay Kr | before 5.0.63 |