CVE-2022-33712
MEDIUMCVSS 5.3/10EPSS 0.62%
Last modified
CVE-2022-33712 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.. EPSS estimates a 0.62% chance of exploitation in the next 30 days.
Description
Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Camera | < 12.0.0.98 |
| Samsung | Camera | > 12.0.01.0, < 12.0.01.64 |
| Samsung | Camera | > 12.0.3.0, < 12.0.3.19 |
| Samsung | Camera | > 12.0.3.19, < 12.0.3.23 |
| Samsung | Camera | > 12.0.6.0, < 12.0.6.11 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-33712?
Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.
How severe is CVE-2022-33712?
CVE-2022-33712 has a CVSS score of 5.3/10 (MEDIUM severity). The EPSS model estimates a 0.62% probability of exploitation in the next 30 days.
How do I fix CVE-2022-33712?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-33707Improper identifier creation logic in Find My Mobile prior t…5.3
- CVE-2022-33708Improper input validation vulnerability in AppsPackageInstal…7.8
- CVE-2022-33709Improper input validation vulnerability in ApexPackageInstal…7.8
- CVE-2022-3371Allocation of Resources Without Limits or Throttling in GitH…7.5
- CVE-2022-33710Improper input validation vulnerability in BillingPackageIns…7.8
- CVE-2022-33711Improper validation of integrity check vulnerability in Sams…5.5
- CVE-2022-33713Implicit Intent hijacking vulnerability in Samsung Cloud pri…7.5
- CVE-2022-33714Improper access control vulnerability in SemWifiApBroadcastR…3.3
- CVE-2022-33715Improper access control and path traversal vulnerability in …5.5
- CVE-2022-33716An absence of variable initialization in ICCC TA prior to SM…4.4
- CVE-2022-33717A missing input validation before memory read in SEM TA prio…4.4
- CVE-2022-33718An improper access control vulnerability in Wi-Fi Service pr…3.3
Are you affected by CVE-2022-33712?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST