Code injection

2021-04-0918:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

CPENameOperatorVersion
accounteq10.8.0.4
accounteq12.1.1.3

CPE	Name	Operator	Version
	account	eq	10.8.0.4
	account	eq	12.1.1.3

References

security.samsungmobile.com/

security.samsungmobile.com/serviceWeb.smsb