PT-2022-20253 · Unknown · Displaytoast

Jenny Zjn · Published 2022-06-07 · Updated 2022-06-11 · CVE-2022-30716

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions DisplayToast prior to SMR Jun-2022 Release 1

Description The issue allows untrusted applications to access toast message information from the device due to an unprotected broadcast in the sendIntentForToastDumpLog function within DisplayToast.

Recommendations For versions prior to SMR Jun-2022 Release 1, update to SMR Jun-2022 Release 1 or later to resolve the issue.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-280

Related Identifiers

CVE-2022-30716

Affected Products

Displaytoast

References · 4

• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-30716 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30716 · Security Note
• https://t.me/cibsecurity/43937 · Telegram Post