CVE-2022-22285

published 2022-01-10

CVE-2022-22285: A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute…

high 7.1 CVSS 3.1

AV L AC L PR L UI N S U C H I H A N

A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and modifying the intent.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
samsung	reminder	< 12.2.05.0	12.2.05.0
samsung	reminder	< 12.3.02.1000	12.3.02.1000
samsung_mobile	reminder	>= - < 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0)	12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0)

CWE-94