What is the severity of CVE-2022-22286?

CVE-2022-22286 is classified as a high severity vulnerability due to its potential to allow unauthorized privileged actions.

How do I fix CVE-2022-22286?

To fix CVE-2022-22286, update Samsung Bixby Routines to version 3.1.21.8 or later.

Which versions of Bixby Routines are affected by CVE-2022-22286?

CVE-2022-22286 affects Bixby Routines versions prior to 3.1.21.8.

Which Android versions are vulnerable to CVE-2022-22286?

CVE-2022-22286 affects devices running Android 10 (2.6.30.5 and below) and Android 11 (3.1.21.8 and below) with Bixby Routines installed.

What actions can be compromised due to CVE-2022-22286?

CVE-2022-22286 allows attackers to hijack and modify intents, potentially executing privileged actions on the device.

Vulnerability/
CVE-2022-22286

high

7.1

CWE

7/1/2022

21/11/2024

CVE-2022-22286: Code Injection

First published: Fri Jan 07 2022(Updated: )

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) allows attackers to execute privileged action by hijacking and modifying the intent.

Credit: mobile.security@samsung.com mobile.security@samsung.com

Affected Software	Affected Version	How to fix
Samsung Bixby Routines	<3.1.21.8
Google Android	=11.0
Samsung Bixby Routines	<2.6.30.5
Google Android	=10.0
All of
Samsung Bixby Routines	<3.1.21.8
Google Android	=11.0
All of
Samsung Bixby Routines	<2.6.30.5
Google Android	=10.0

Never miss a vulnerability like this again

Reference Links

https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=1

Frequently Asked Questions

What is the severity of CVE-2022-22286?
CVE-2022-22286 is classified as a high severity vulnerability due to its potential to allow unauthorized privileged actions.
How do I fix CVE-2022-22286?
To fix CVE-2022-22286, update Samsung Bixby Routines to version 3.1.21.8 or later.
Which versions of Bixby Routines are affected by CVE-2022-22286?
CVE-2022-22286 affects Bixby Routines versions prior to 3.1.21.8.
Which Android versions are vulnerable to CVE-2022-22286?
CVE-2022-22286 affects devices running Android 10 (2.6.30.5 and below) and Android 11 (3.1.21.8 and below) with Bixby Routines installed.
What actions can be compromised due to CVE-2022-22286?
CVE-2022-22286 allows attackers to hijack and modify intents, potentially executing privileged actions on the device.

agent/type
collector/nvd-index
agent/software-canonical-lookup-request
collector/mitre-cve
source/MITRE
agent/severity
agent/weakness
agent/references
agent/first-publish-date
agent/description
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/last-modified-date
agent/author
agent/event
agent/softwarecombine
agent/tags
agent/source
vendor/samsung
canonical/samsung bixby routines
vendor/google
canonical/google android
version/google android/11.0
version/google android/10.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2022-22286?
CVE-2022-22286 is classified as a high severity vulnerability due to its potential to allow unauthorized privileged actions.
How do I fix CVE-2022-22286?
To fix CVE-2022-22286, update Samsung Bixby Routines to version 3.1.21.8 or later.
Which versions of Bixby Routines are affected by CVE-2022-22286?
CVE-2022-22286 affects Bixby Routines versions prior to 3.1.21.8.
Which Android versions are vulnerable to CVE-2022-22286?
CVE-2022-22286 affects devices running Android 10 (2.6.30.5 and below) and Android 11 (3.1.21.8 and below) with Bixby Routines installed.
What actions can be compromised due to CVE-2022-22286?
CVE-2022-22286 allows attackers to hijack and modify intents, potentially executing privileged actions on the device.