CVE-2022-27837: Code Injection
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the file with system privilege.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-27837?
CVE-2022-27837 is classified as a high severity vulnerability due to potential unauthorized file access with system privileges.
How do I fix CVE-2022-27837?
To fix CVE-2022-27837, update your Samsung Accessibility application to version 12.5.3.2 or higher.
Which Android versions are affected by CVE-2022-27837?
CVE-2022-27837 affects Samsung Accessibility applications prior to version 12.5.3.2 on Android R (11.0) and Android S (12.0) up to version 13.0.1.1.
What type of attack is possible due to CVE-2022-27837?
CVE-2022-27837 allows attackers to exploit the PendingIntent feature to gain unauthorized access to files with system privileges.
Is CVE-2022-27837 specific to Samsung devices?
Yes, CVE-2022-27837 specifically affects the Samsung Accessibility application on designated Android versions.