Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information.
The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
The product makes files or directories accessible to unauthorized actors, even though they should not be.
Link | Tags |
---|---|
https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1 | vendor advisory |