CVE-2022-28781 HIGH

CVE-2022-28781

Vendor Samsung Mobile
Product Samsung Mobile Devices
Weakness CWE-20 · Input validation
Published May 3, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with system privilege. The patch adds proper validation logic to check the caller.

Key dates

02Disclosure timeline

May 3, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-20240 Denial of Service through coldToFrozen.sh Script in Splunk Enterprise CVE-2026-21678 iccDEV has heap-buffer-overflow vulnerability on IccTagXml() CVE-2024-39827 Zoom Workplace Desktop App for Windows - Improper Input Validation CVE-2026-25723 Claude Code Vulnerable to Command Injection via Piped sed Command Bypasses File Write Restrictions CVE-2025-6585 WP JobHunt <= 7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Account Deletion