Use of Implicit Intent for Sensitive Communication
CVE-2022-33734
Summary
Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.
- LOW
- LOCAL
- NONE
- UNCHANGED
- NONE
- NONE
- HIGH
- NONE
CWE-927 - Use of Implicit Intent for Sensitive Communication
The Android application uses an implicit intent for transmitting sensitive data to other applications.
References
Advisory Timeline
- Published
