CVE-2022-39862: Critical severity samsung dynamic lockscreen vulnerability
Published Oct 7, 2022
·Updated
Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api.
Affected Software
3 affected components
Samsung Dynamic Lockscreen<3.3.03.66
Google Android=11.0
Google Android=12.0
Event History
Oct 7, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-39862?
CVE-2022-39862 is considered a high-severity vulnerability due to improper authorization in the Dynamic Lockscreen.
2
How do I fix CVE-2022-39862?
To fix CVE-2022-39862, update your Samsung Dynamic Lockscreen to version 3.3.03.66 or later.
3
Which devices are affected by CVE-2022-39862?
CVE-2022-39862 affects the Samsung Dynamic Lockscreen prior to version 3.3.03.66 on Android R(11) devices.
4
What type of vulnerability is CVE-2022-39862?
CVE-2022-39862 is an improper authorization vulnerability in the Dynamic Lockscreen.
5
Can CVE-2022-39862 be exploited remotely?
CVE-2022-39862 may be exploited locally by an unauthorized user accessing the JavaScript interface API.