Vulnerability Description
Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.
CVSS Score
4.0
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Group Sharing | < 13.0.6.15 |
| Android | 12.0 |
Related Weaknesses (CWE)
References
- https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09Vendor Advisory
- https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09Vendor Advisory
FAQ
What is CVE-2022-36866?
CVE-2022-36866 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.
How severe is CVE-2022-36866?
CVE-2022-36866 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-36866?
Check the references section above for vendor advisories and patch information. Affected products include: Samsung Group Sharing, Google Android.