CVE-2022-25824: Samsung Bixby Touch

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control vulnerability in BixbyTouch prior to version 2.2.00.6 in China models allows untrusted applications to load arbitrary URL and local files in webview.

Affected products

• Samsung Bixby Touch: before 2.2.00.6 (fixed in 2.2.00.6)

Published 2022-03-10. Last modified 2026-06-17.