CVE-2022-24003 — Sensitive Information Exposure in Mobile Bixby Vision

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.3MEDIUMNVD
CNA4.0
EPSS
0.2%
top 55.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Samsung Mobile Bixby VisionSamsung Bixby Vision
Timeline
PublishedFeb 11
Latest updateFeb 12

Description

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDsamsung/bixby_vision< 3.7.50.6
▶CVEListV5samsung_mobile/bixby_vision- — 3.7.50.6

🔴Vulnerability Details

2
GHSA
GHSA-f988-rprv-54mm: Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3↗2022-02-12
▶
CVEList
CVE-2022-24003: Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3↗2022-02-11
▶
CVE-2022-24003 — Sensitive Information Exposure | cvebase