CVE-2022-23994: Samsung Wear OS

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.

Affected products

• Samsung Wear OS: before 3.0 (fixed in 3.0)

Published 2022-02-11. Last modified 2026-06-17.