CVE-2022-36830

—

CVSS 3.1

5.5 medium

EPSS

<1%p7

Published

Aug 5, 2022 (Aug 5, 2022)

Modified

Jun 17, 2026

Description

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.

Vendors: samsung
Products: charm firmware
Weakness: CWE-927
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.