CVE-2022-23434: Samsung Bixby

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.

Affected products

  • Samsung Bixby: before 3.7.50.6 (fixed in 3.7.50.6); before 3.7.60.8 (fixed in 3.7.60.8)

Published 2022-02-11. Last modified 2026-06-17.