Samsung Pay vulnerabilities

4 known vulnerabilities affecting samsung/samsung_pay.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM4

Vulnerabilities

Page 1 of 1

CVE-2024-20850MEDIUMCVSS 5.5fixed in 5.4.992024-04-02

CVE-2024-20850 [MEDIUM] CVE-2024-20850: Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows loc Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay.

CVE-2022-36871MEDIUMCVSS 6.5fixed in 5.1.472022-09-09

CVE-2022-36871 [MEDIUM] CWE-285 CVE-2022-36871: Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

CVE-2022-36870MEDIUMCVSS 6.5fixed in 5.1.472022-09-09

CVE-2022-36870 [MEDIUM] CWE-285 CVE-2022-36870: Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to versi Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.

CVE-2022-36872MEDIUMCVSS 6.5fixed in 5.1.472022-09-09

CVE-2022-36872 [MEDIUM] CWE-285 CVE-2022-36872: Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 fo Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.