CVE-2022-22286: Samsung Bixby Routines

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) allows attackers to execute privileged action by hijacking and modifying the intent.

Affected products

• Samsung Bixby Routines: before 3.1.21.8 (fixed in 3.1.21.8); before 2.6.30.5 (fixed in 2.6.30.5)

Published 2022-01-10. Last modified 2026-06-17.