CVE-2022-36866: Medium severity samsung group sharing vulnerability
Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-36866?
CVE-2022-36866 is rated as a high severity vulnerability due to improper access control allowing potential identification of devices.
How do I fix CVE-2022-36866?
To fix CVE-2022-36866, update the Samsung Group Sharing application to version 13.0.6.15 or later.
What does CVE-2022-36866 exploit?
CVE-2022-36866 exploits improper access control in the Broadcaster feature of the Samsung Group Sharing application.
Which versions of Samsung Group Sharing are affected by CVE-2022-36866?
Versions of Samsung Group Sharing prior to 13.0.6.15 for Android S(12) and 13.0.6.14 for Android R(11) and below are affected.
Who is primarily impacted by CVE-2022-36866?
Users of Samsung Group Sharing app on compatible Android devices prior to the specified versions are primarily impacted by CVE-2022-36866.