CVE-2022-36833 HIGH

CVE-2022-36833

Vendor Samsung Mobile
Product Game Optimizing Service
Weakness CWE-269
Published August 5, 2022
Last update August 3, 2024

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name.

Key dates

02Disclosure timeline

August 5, 2022 CVE published
August 3, 2024 Record updated