CVE-2022-27575 — Sensitive Information Exposure in Mobile Devices

CWE-200 — Sensitive Information Exposure CWE-863 — Incorrect Authorization CWE-668 — Resource Exposure3 documents3 sources

Severity

3.3LOWNVD

EPSS

0.1%

top 82.31%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Mobile Devices Google Android

Timeline

PublishedApr 11

Latest updateApr 12

Description

Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5samsung_mobile/samsung_mobile_devicesQ(10), R(11), S(12) — SMR Apr-2022 Release 1

▶NVDgoogle/android10.0, 11.0, 12.0+2

🔴Vulnerability Details

GHSA

GHSA-9642-q8fh-rw5m: Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information wit↗2022-04-12

▶

CVEList

CVE-2022-27575: Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information wit↗2022-04-11

▶