CVE-2022-36866

published 2022-09-09

CVE-2022-36866: Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows…

low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C L I N A N

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
samsung	group_sharing	< 13.0.6.15	13.0.6.15
samsung	group_sharing	< 13.0.6.14	13.0.6.14
samsung_mobile	group_sharing	>= unspecified < 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below	13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below

CWE-284