Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-39915

Description

Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent.

POC

Reference

- https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=12

Github

- https://github.com/Live-Hack-CVE/CVE-2022-39915