CVE-2022-23998: Samsung Camera

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(10) and 9.0.6.68 in Android P(9) allows untrusted applications to take a picture in screenlock status.

Affected products

• Samsung Camera: before 11.1.02.16 (fixed in 11.1.02.16); before 10.5.03.77 (fixed in 10.5.03.77); before 9.0.6.68 (fixed in 9.0.6.68)

Published 2022-02-11. Last modified 2026-06-17.